CVE-2025-29062

creationtimestamp| type| source ---|---|--- 2025-04-02 23:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluiktvujs2w 2025-04-03 01:01:38+00:00| seen| https://t.me/cvedetector/21928 2025-04-03 17:48:24+00:00| seen|...

CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

CVE-2025-29062

CVE-2025-29062 affects LB-LINK BL-AC2100 routers (≤ V1.0.4). The flaw is in the goahead webservice’s set_LimitClient_cfg, where time1/time2 parameters enable remote code execution. Documented CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, CRITICAL). PoC/automation notes are present in s...