Priority CRITICAL 88
LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.7769 · Published 2023-03-26 · No fix listed CWE-77
Priority HIGH 82
An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01095 · Published 2025-04-02 · No fix listed CWE-77
Priority HIGH 82
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01095 · Published 2025-04-02 · No fix listed CWE-77
Priority HIGH 81
A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0086 · Published 2025-07-14 · No fix listed CWE-287
Priority HIGH 77
The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00431 · Published 2025-09-09 · No fix listed CWE-287
Priority HIGH 76
LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00574 · Published 2024-11-01 · No fix listed CWE-798
Priority HIGH 75
A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00765 · Published 2026-08-15 · No fix listed CWE-259
Priority HIGH 75
A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.02941 · Published 2026-08-15 · No fix listed CWE-259
Priority HIGH 73
A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00691 · Published 2026-03-16 · No fix listed CWE-119
Priority HIGH 73
A weakness has been identified in LB-LINK BL-WR9000 2.4.9.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00722 · Published 2026-03-16 · No fix listed CWE-119
Priority HIGH 73
A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.04556 · Published 2025-09-22 · No fix listed CWE-119
Priority HIGH 72
A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2025-07-14 · No fix listed CWE-259
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-07-14 · No fix listed CWE-200
Priority HIGH 70
A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-07-14 · No fix listed CWE-200
Priority HIGH 70
A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00757 · Published 2025-07-14 · No fix listed CWE-200
Priority HIGH 70
LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00442 · Published 2024-06-14 · No fix listed CWE-1021
Priority MEDIUM 63
A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.1017 · Published 2025-02-24 · No fix listed CWE-77
Priority MEDIUM 61
An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00301 · Published 2024-06-14 · No fix listed CWE-639
Priority MEDIUM 57
A vulnerability was detected in LB-LINK BL-WR9000 2.4.9.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.12932 · Published 2026-03-16 · No fix listed CWE-74
Priority MEDIUM 57
A security vulnerability has been detected in LB-LINK BL-X26 1.2.8.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.05548 · Published 2025-08-28 · No fix listed CWE-77
Priority MEDIUM 57
A weakness has been identified in LB-LINK BL-X26 1.2.8.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.05706 · Published 2025-08-28 · No fix listed CWE-77
Priority MEDIUM 57
A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.19768 · Published 2025-04-29 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.13187 · Published 2025-02-24 · No fix listed CWE-77
Priority MEDIUM 57
A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.1017 · Published 2025-02-24 · No fix listed CWE-77
Priority MEDIUM 50
LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00619 · Published 2024-06-14 · No fix listed CWE-256
Load more
THREATIST.IORead the docs