CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29063

The LB-LINK BL-AC2100 wireless Wi-Fi 6 router is vulnerable to remote code execution (RCE) in versions V1.0.4 and earlier . The root cause is the improper handling of the enable parameter passed to the /goform/set_hidessid_cfg endpoint, specifically due to improper neutralization of special eleme...