Command injection

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg. Recent assessments: Assessed Attacker Value: 0 Assessed...

多款LB-LINK产品命令注入漏洞

LB-LINK BL-AC1900 and others are a wireless router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8, which originates from the use of the mac, time1, and time1 in the /goform/se...

CVE-2023-26801

CVE-2023-26801 affects LB-LINK BL-AC1900_2.0 v1.0.1, BL-WR9000 v2.4.9, BL-X26 v1.2.5, and BL-LTE300 v1.0.8. The vulnerability is a command injection via the mac, time1, and time2 parameters in /goform/set_LimitClient_cfg. Root cause involves improper input handling in the /goform/set_LimitClient_...

PT-2023-2961

Name of the Vulnerable Software and Affected Versions LB-LINK BL-AC1900 2.0 version 1.0.1 LB-LINK BL-WR9000 version 2.4.9 LB-LINK BL-X26 version 1.2.5 LB-LINK BL-LTE300 version 1.0.8 Description The issue is related to a command injection vulnerability via the mac, time1, and time2 parameters at...

VulnCheck KEV: CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

Logic Vulnerabilities in Multiple LB-LINK Routers

BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. Logic vulnerabilities exist in several LB-LINK routers. Attackers can utilize the vulnerabilities to modify user passwords, wifi passwords and other information...

Command Execution Vulnerability in Multiple LB-LINK Routers

BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. A command execution vulnerability exists in multiple LB-LINK routers. An attacker can exploit this vulnerability to gain control of a web server...

Information Disclosure Vulnerability in Multiple LB-LINK Routers

BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. An information disclosure vulnerability exists in multiple LB-LINK routers. An attacker can exploit the vulnerabilities to obtain sensitive information...