Bl-ac2100 Firmware vulnerabilities

3 known vulnerabilities in Bl-ac2100 Firmware from Lb-link. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  BL-AC2100: Out-of-bounds Write

  CVE-2025-10773Sep 22, 2025B-linkEPSS 4.56%

  A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-base

• 9.8 Critical severity

  Bl-ac2100 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2025-29063Apr 2, 2025Lb-linkEPSS 1.09%

  An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.

• 9.8 Critical severity

  Bl-ac2100 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2025-29062Apr 2, 2025Lb-linkEPSS 1.09%

  An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.