A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component Administrative Interface. The manipulation leads to use of default credentials. An attack has to be approached locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md | Exploit Third Party Advisory |
| https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.321690 | Permissions Required VDB Entry |
| https://vuldb.com/?id.321690 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.636068 | Third Party Advisory VDB Entry |
| https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md | Exploit Third Party Advisory |
| https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
09 Sep 2025, 19:13
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:seeedstudio:linkit_smart_7688_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:seeedstudio:linkit_smart_7688:-:*:*:*:*:*:*:* |
|
| First Time |
Seeedstudio
Seeedstudio linkit Smart 7688 Firmware Seeedstudio linkit Smart 7688 |
|
| References | () https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md - Exploit, Third Party Advisory | |
| References | () https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.321690 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.321690 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.636068 - Third Party Advisory, VDB Entry |
28 Aug 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md - | |
| References | () https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce - |
28 Aug 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-28 18:15
Updated : 2025-09-09 19:13
NVD link : CVE-2025-9576
Mitre link : CVE-2025-9576
CVE.ORG link : CVE-2025-9576
JSON object : View
Products Affected
seeedstudio
- linkit_smart_7688_firmware
- linkit_smart_7688
CWE