CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

LB-LINK BL-AC2100 命令注入漏洞

LB-LINK BL-AC2100 is a wireless Wi-Fi 6 router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-AC2100 V1.0.4 and earlier versions, which stems from improper handling of the enable parameter and could lead to remote code execution...

CVE-2025-29062

CVE-2025-29062 affects LB-LINK BL-AC2100 routers (≤ V1.0.4). The flaw is in the goahead webservice’s set_LimitClient_cfg, where time1/time2 parameters enable remote code execution. Documented CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, CRITICAL). PoC/automation notes are present in s...

LB-LINK BL-AC2100 命令注入漏洞

LB-LINK BL-AC2100 is a wireless Wi-Fi 6 router from China Bilink LB-LINK. A command injection vulnerability exists in LB-LINK BL-AC2100 V1.0.4 and earlier versions, which stems from improper handling of the time1 and time2 parameters, and could lead to remote code execution...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

PT-2025-14545 · Bl-Ac2100 · Bl-Ac2100

Name of the Vulnerable Software and Affected Versions: BL-AC2100 versions 1.0.4 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the enable parameter passed to "/goform/set hidessid cfg", which is not handled properly. Recommendations: For BL-AC2100 versio...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29063

CVE-2025-29063 affects BL-AC2100 (V1.0.4 and earlier). The issue arises from improper handling of the enable parameter in /goform/set_hidessid_cfg, allowing a remote attacker to execute arbitrary code. The metric in the entry shows a high-severity impact (CVSS 3.1: 9.8, Critical; Attack Vector: N...

CVE-2021-27703

Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting XSS via the firmware update page...

CVE-2021-27702

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard...

CVE-2021-27703

Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting XSS via the firmware update page...

CVE-2021-27703

CVE-2021-27703 affects Sercomm Model Etisalat Model S3-AC2100; the vulnerability is Cross Site Scripting (XSS) via the firmware update page. Documented impact is limited to XSS with no exploitation details provided; remediation cited across sources is to update to the latest firmware version. No ...

CVE-2021-27703

Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting XSS via the firmware update page...

PT-2024-10909 · Sercomm · Sercomm

Name of the Vulnerable Software and Affected Versions: Sercomm Model Etisalat Model S3- AC2100 affected versions not specified Description: The issue is related to Cross Site Scripting XSS via the firmware update page. This high-severity vulnerability impacts specific versions of Sercomm products...