CVE-2025-4076
LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection
A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function easy_uci_set_option_string_0 of the file /cgi-bin/lighttpd.cgi of the component Password Handler. The manipulation of the argument routepwd leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Es wurde eine Schwachstelle in LB-LINK BL-AC3600 bis 1.0.22 entdeckt. Sie wurde als kritisch eingestuft. Dabei betrifft es die Funktion easy_uci_set_option_string_0 der Datei /cgi-bin/lighttpd.cgi der Komponente Password Handler. Durch das Beeinflussen des Arguments routepwd mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
| 2025-04-29: | Advisory disclosed |
| 2025-04-29: | VulDB entry created |
| 2025-04-29: | VulDB entry last update |
Gray (VulDB User)
vuldb.com/?id.306513 (VDB-306513 | LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection)
vuldb.com/?ctiid.306513 (VDB-306513 | CTI Indicators (IOB, IOC, TTP, IOA))
vuldb.com/?submit.560232 (Submit #560232 | LBlink BL-AC3600 1.0.22 Command Injection)
github.com/GrayLxton/BLink_poc
github.com/GrayLxton/BLink_poc/blob/main/poc.py
Support options
