An incorrect privilege assignment in OpenWrt LuCI enables authenticated users to gain elevated write access, potentially leading to unauthorized command execution.

This vulnerability involves incorrect privilege assignment (CWE-266). An authenticated user with low privileges (PR:L) can exploit an overly permissive access control list (ACL) in the luci-mod-system-mounts component to gain write access to the root crontab.

With a CVSS score of 8.8, this vulnerability poses a significant threat to system integrity. An attacker with standard access could use the ability to modify root crontabs to achieve persistent, elevated command execution, essentially granting them full control over the affected OpenWrt device.

Immediate Action: Review the OpenWrt LuCI security advisory and apply the recommended configuration changes or software updates provided by the project.

Proactive Monitoring: Audit crontab files for unauthorized entries and monitor system access logs for privilege escalation attempts.

Compensating Controls: Restrict access to the LuCI interface to only essential users and disable the system-mounts module if it is not required for daily operations.

Public Exploit Available: No

Administrators should verify their OpenWrt LuCI configuration immediately. Given the high risk of privilege escalation, apply official patches as soon as they are released and audit existing user permissions to ensure the principle of least privilege is strictly enforced.