LB-LINK kayıtları
lb-link üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')7
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-256 Plaintext Storage of a Password1
- CWE-259 Use of Hard-coded Password1
- CWE-287 Improper Authentication1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
60Bu hafta | CVE-2023-26801İstismar yok | LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a comlb-link · bl-lte300 firmware · CWE-77 | Kritik9,8 | — | %69,7 | 26 Mar 2023 |
39İzleyin | CVE-2025-29062İstismar yok | An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_lb-link · bl-ac2100 firmware · CWE-77 | Kritik9,8 | — | %1,1 | 2 Nis 2025 |
39İzleyin | CVE-2025-29063İstismar yok | An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hilb-link · bl-ac2100 firmware · CWE-77 | Kritik9,8 | — | %1,1 | 2 Nis 2025 |
39İzleyin | CVE-2024-33375İstismar yok | LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.lb-link · bl-w1210m firmware · CWE-256 | Kritik9,8 | — | %0,6 | 14 Haz 2024 |
39İzleyin | CVE-2024-51431İstismar yok | LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.lb-link · bl-wr1300h firmware · CWE-798 | Kritik9,8 | — | %0,6 | 1 Kas 2024 |
35İzleyin | CVE-2025-57278İstismar yok | The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handlinlb-link · bl-cpe300m firmware · CWE-287 | Yüksek8,8 | — | %0,4 | 9 Eyl 2025 |
32İzleyin | CVE-2024-33377İstismar yok | LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.lb-link · bl-w1210m firmware · CWE-1021 | Yüksek8,1 | — | %0,4 | 14 Haz 2024 |
30İzleyin | CVE-2025-10773İstismar yok | B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflowlb-link · bl-ac2100 firmware · CWE-119 | Yüksek7,4 | — | %4,0 | 21 Eyl 2025 |
29İzleyin | CVE-2026-4226İstismar yok | LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflowlb-link · bl-wr9000 firmware · CWE-119 | Yüksek7,4 | — | %1,1 | 16 Mar 2026 |
29İzleyin | CVE-2026-4227İstismar yok | LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflowlb-link · bl-wr9000 firmware · CWE-119 | Yüksek7,4 | — | %1,1 | 16 Mar 2026 |
28İzleyin | CVE-2025-7564İstismar yok | LB-LINK BL-AC3600 shadow hard-coded credentialslb-link · bl-ac3600 firmware · CWE-259 | Yüksek7,1 | — | %0,2 | 13 Tem 2025 |
25İzleyin | CVE-2025-1610İstismar yok | LB-LINK AC1900 Router set_blacklist websGetVar os command injectionlb-link · ac1900 firmware · CWE-77 | Orta5,3 | — | %13,2 | 23 Şub 2025 |
25İzleyin | CVE-2024-33373İstismar yok | An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords forlb-link · bl-w1210m firmware · CWE-639 | Orta6,3 | — | %0,3 | 14 Haz 2024 |
24İzleyin | CVE-2025-1609İstismar yok | LB-LINK AC1900 Router set_cmd websGetVar os command injectionlb-link · ac1900 firmware · CWE-77 | Orta5,3 | — | %10,2 | 23 Şub 2025 |
24İzleyin | CVE-2025-1608İstismar yok | LB-LINK AC1900 Router set_manpwd websGetVar os command injectionlb-link · ac1900 firmware · CWE-77 | Orta5,3 | — | %10,2 | 23 Şub 2025 |
22İzleyin | CVE-2025-7565İstismar yok | LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosurelb-link · bl-ac3600 firmware · CWE-200 | Orta5,5 | — | %0,6 | 14 Tem 2025 |
11İzleyin | CVE-2026-4228İstismar yok | LB-LINK BL-WR9000 set_wifi sub_458754 command injectionlb-link · bl-wr9000 firmware · CWE-74 | Düşük2,1 | — | %8,9 | 16 Mar 2026 |
10İzleyin | CVE-2025-9580İstismar yok | LB-LINK BL-X26 HTTP set_blacklist os command injectionlb-link · bl-x26 firmware · CWE-77 | Düşük2,1 | — | %6,7 | 28 Ağu 2025 |
- CVE-2023-2680160Bu hafta
LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a com
KritikCVSS 9,8İstismar yokEPSS %70lb-link · bl-lte300 firmware26 Mar 2023
- CVE-2025-2906239İzleyin
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_
KritikCVSS 9,8İstismar yokEPSS %1lb-link · bl-ac2100 firmware2 Nis 2025
- CVE-2025-2906339İzleyin
An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hi
KritikCVSS 9,8İstismar yokEPSS %1lb-link · bl-ac2100 firmware2 Nis 2025
- CVE-2024-3337539İzleyin
LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.
KritikCVSS 9,8İstismar yokEPSS %1lb-link · bl-w1210m firmware14 Haz 2024
- CVE-2024-5143139İzleyin
LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.
KritikCVSS 9,8İstismar yokEPSS %1lb-link · bl-wr1300h firmware1 Kas 2024
- CVE-2025-5727835İzleyin
The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handlin
YüksekCVSS 8,8İstismar yokEPSS %0lb-link · bl-cpe300m firmware9 Eyl 2025
- CVE-2024-3337732İzleyin
LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.
YüksekCVSS 8,1İstismar yokEPSS %0lb-link · bl-w1210m firmware14 Haz 2024
- CVE-2025-1077330İzleyin
B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflow
YüksekCVSS 7,4İstismar yokEPSS %4lb-link · bl-ac2100 firmware21 Eyl 2025
- CVE-2026-422629İzleyin
LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow
YüksekCVSS 7,4İstismar yokEPSS %1lb-link · bl-wr9000 firmware16 Mar 2026
- CVE-2026-422729İzleyin
LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow
YüksekCVSS 7,4İstismar yokEPSS %1lb-link · bl-wr9000 firmware16 Mar 2026
- CVE-2025-756428İzleyin
LB-LINK BL-AC3600 shadow hard-coded credentials
YüksekCVSS 7,1İstismar yokEPSS %0lb-link · bl-ac3600 firmware13 Tem 2025
- CVE-2025-161025İzleyin
LB-LINK AC1900 Router set_blacklist websGetVar os command injection
OrtaCVSS 5,3İstismar yokEPSS %13lb-link · ac1900 firmware23 Şub 2025
- CVE-2024-3337325İzleyin
An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for
OrtaCVSS 6,3İstismar yokEPSS %0lb-link · bl-w1210m firmware14 Haz 2024
- CVE-2025-160924İzleyin
LB-LINK AC1900 Router set_cmd websGetVar os command injection
OrtaCVSS 5,3İstismar yokEPSS %10lb-link · ac1900 firmware23 Şub 2025
- CVE-2025-160824İzleyin
LB-LINK AC1900 Router set_manpwd websGetVar os command injection
OrtaCVSS 5,3İstismar yokEPSS %10lb-link · ac1900 firmware23 Şub 2025
- CVE-2025-756522İzleyin
LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure
OrtaCVSS 5,5İstismar yokEPSS %1lb-link · bl-ac3600 firmware14 Tem 2025
- CVE-2026-422811İzleyin
LB-LINK BL-WR9000 set_wifi sub_458754 command injection
DüşükCVSS 2,1İstismar yokEPSS %9lb-link · bl-wr9000 firmware16 Mar 2026
- CVE-2025-958010İzleyin
LB-LINK BL-X26 HTTP set_blacklist os command injection
DüşükCVSS 2,1İstismar yokEPSS %7lb-link · bl-x26 firmware28 Ağu 2025