Linksys E2500 vsftpd Misconfiguration Vulnerability Allowing Unauthorized Access and Privilege Escalation

A vulnerability exists in the Linksys E2500 router running firmware version 3.0.04.002, where the vsftpd FTP server is configured with the 'chroot_local_user' option enabled. This misconfiguration can result in unauthorized access to system files, potential privilege escalation, or exploitation of the compromised device as a pivot point for attacks within the internal network.

Impact

The vulnerability could lead to unauthorized access to system files, allowing for privilege escalation or misuse of the compromised server to launch attacks on other devices within the internal network.