Bl-ac3600 Firmware vulnerabilities

2 known vulnerabilities in Bl-ac3600 Firmware from Lb-link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  BL-AC3600: Insufficiently Protected Credentials

  CVE-2025-7565Jul 14, 2025Lb-link

  A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function geteasycfg of the file /cgi-bin/lighttpd.cgi of the component Web Management Interface. The manipulation of the argument Password leads to

• 7.8 High severity

  BL-AC3600: Use of Hard-coded Credentials

  CVE-2025-7564Jul 14, 2025Lb-link

  A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local