TI-2025-09864 CVE-2025-10773 · GHSA-xvvh-w6wp-p287
B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflow
Priority HIGH 73
A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3.
3 records
A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3.
An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.