References https://www.vulncheck.com/advisories/samsung-wlan-ap-wea453e-unauthenticated-rce https://nvd.nist.gov/vuln/detail/CVE-2025-34068 https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba https://s4e.io/tools/samsung-wlan-ap-remote-code-execution https://beaglesecurity.com/blog/vulnerability/samsung-wlan-ap-wea453e-rce.html https://github.com/advisories/GHSA-93wv-9xc2-q2rq https://cve.imfht.com/detail/CVE-2025-34068?lang=en https://securityonline.info/critical-pre-auth-root-rce-found-in-samsung-wlan-aps-poc-published-patch-now/ https://www.samsung.com/us/business/support/owners/product/400-series-wea453/
Related Vulnerabilitiessamsung-wea453e-default-pwd: Samsung Wea453e Default Passwordsamsung-wlan-ap-wea453e-lfi: Samsung WLAN AP LFIsamsung-wlan-ap-wea453e-rce: Samsung Wlan AP Wea453e RCEPoCCVE-2024-7399: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code ExecutionPoCCVE-2025-4632: Samsung MagicINFO 9 Server - File Upload & Remote Code ExecutionPoCsamsung-shop-csp-bypass: Content-Security-Policy Bypass - Samsung ShopPoCsamsung-printer-default-login: Samsung Printer - Default LoginPoCsamsung-wlan-default-login: Samsung Wlan AP (WEA453e) Default LoginPoCsamsung-wlan-ap-lfi: Samsung WLAN AP WEA453e - Local File InclusionPoCsamsung-wlan-ap-rce: Samsung WLAN AP WEA453e - Remote Code ExecutionPoCsamsung-wlan-ap-xss: Samsung WLAN AP WEA453e - Cross-Site Scripting(CVE-2025-4632) Samsung MagicINFO 9 Server目录限制不足漏洞Samsung SmartViewer STWAxConfig内存损坏漏洞