CVE-2025-52361 – Lighttpd AK-Nord USB-Server-LXL Root Command Execution

CVE ID : CVE-2025-52361

Published : Aug. 1, 2025, 4:15 p.m. | 1 hour, 22 minutes ago

Description : Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0.16 Build 2023-03-13 allows a locally authenticated low-privilege user to execute arbitrary commands with root privilege via editing this script which is executed with root-privileges on any interaction and on every system boot.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…