CyberRota Analysis
AI-GeneratedOpenWrt LuCI's overly permissive access control list (ACL) in the luci-mod-system-mounts module allows authenticated users with limited permissions to write to the /etc/crontabs/root file. This vulnerability enables these users to append arbitrary cron jobs that are executed as root by the busybox crond daemon, potentially leading to unauthorized command execution. Organizations using OpenWrt should prioritize patching this vulnerability to mitigate the risk of privilege escalation and system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write, which the default busybox crond daemon executes as root within one minute.