CVE-2025-34068

An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.

• CWE-306

• https://fortiguard.fortinet.com/encyclopedia/ips/57323
• https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba
• https://s4e.io/tools/samsung-wlan-ap-remote-code-execution
• https://www.samsung.com/us/business/support/owners/product/400-series-wea453/
• https://www.vulncheck.com/advisories/samsung-wlan-ap-wea453e-unauthenticated-rce

Published

Jul 15, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34062An information disclosure vulnerability exists in OneLogin A…5.7
• CVE-2025-34063A cryptographic authentication bypass vulnerability exists i…10
• CVE-2025-34064A cloud infrastructure misconfiguration in OneLogin AD Conne…9
• CVE-2025-34065An authentication bypass vulnerability exists in AVTECH IP c…6.9
• CVE-2025-34066An improper certificate validation vulnerability exists in A…8.3
• CVE-2025-34067An unauthenticated remote command execution vulnerability ex…10
• CVE-2025-34069An authentication bypass vulnerability exists in GFI Kerio C…9.8
• CVE-2025-3407A vulnerability was found in Nothings stb up to f056911. It …8.8
• CVE-2025-34070A missing authentication vulnerability in the GFIAgent compo…9.8
• CVE-2025-34071A remote code execution vulnerability in GFI Kerio Control 9…9.8
• CVE-2025-34072A data exfiltration vulnerability exists in Anthropic’s depr…9.3
• CVE-2025-34073An unauthenticated command injection vulnerability exists in…10