Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-29062 1 Lb-link 2 Bl-ac2100, Bl-ac2100 Firmware 2025-04-29 9.8 Critical
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.
CVE-2025-29063 1 Lb-link 2 Bl-ac2100, Bl-ac2100 Firmware 2025-04-29 9.8 Critical
An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.
CVE-2024-51431 1 Lb-link 2 Bl-wr1300h, Bl-wr1300h Firmware 2024-11-05 8.1 High
LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.