CVE-2025-41664 — Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates
A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime …
Published: 2025-09-08 · CVSS: 7.5 · CVSS 3.1
A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime of services (e.g., FTP/SFTP). This access could allow the attacker to escalate privileges and modify firmware.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7