References https://beaglesecurity.com/blog/vulnerability/samsung-wlan-ap-wea453e-rce.html https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba https://www.vulncheck.com/advisories/samsung-wlan-ap-wea453e-unauthenticated-rce https://nvd.nist.gov/vuln/detail/CVE-2025-34068 https://securityonline.info/critical-pre-auth-root-rce-found-in-samsung-wlan-aps-poc-published-patch-now/ https://github.com/emadshanab/goby_poc5/blob/main/Samsung_WLAN_AP_WEA453e_RCE.json https://www.youtube.com/watch?v=I5-smUCIBG4 https://s4e.io/tools/samsung-wlan-ap-remote-code-execution
Related Vulnerabilitiessamsung-wea453e-default-pwd: Samsung Wea453e Default Passwordsamsung-wea453e-rce: Samsung Wea453e RCEsamsung-wlan-ap-wea453e-lfi: Samsung WLAN AP LFIPoCCVE-2024-7399: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code ExecutionPoCCVE-2025-4632: Samsung MagicINFO 9 Server - File Upload & Remote Code ExecutionPoCsamsung-shop-csp-bypass: Content-Security-Policy Bypass - Samsung ShopPoCsamsung-printer-default-login: Samsung Printer - Default LoginPoCsamsung-wlan-default-login: Samsung Wlan AP (WEA453e) Default LoginPoCsamsung-wlan-ap-lfi: Samsung WLAN AP WEA453e - Local File InclusionPoCsamsung-wlan-ap-rce: Samsung WLAN AP WEA453e - Remote Code ExecutionPoCsamsung-wlan-ap-xss: Samsung WLAN AP WEA453e - Cross-Site Scripting(CVE-2025-4632) Samsung MagicINFO 9 Server目录限制不足漏洞Samsung SmartViewer STWAxConfig内存损坏漏洞