Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 5:37 a.m.•12 views

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

9.8CVSS8AI score0.69663EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/02 9:15 p.m.•15 views

CVE-2025-29062

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

9.8CVSS6.1AI score0.01077EPSS
SaveExploits1References2
CVE
CVE
•added 2025/04/02 12:00 a.m.•165 views

CVE-2025-29062

The LB-LINK BL-AC2100 (a wireless Wi-Fi 6 router) is vulnerable to a command injection flaw in versions V1.0.4 and earlier . The root cause is the improper handling of the time1 and time2 parameters within the set_LimitClient_cfg function of the goahead webservice . This vulnerability allows a re...

8.1AI score0.01077EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•1 views

CVE-2025-29062: Improper Neutralization of Special Elements used in a Command

An issue in BL-AC2100 =V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the setLimitClientcfg of the goahead webservice...

9.8CVSS6.6AI score0.01077EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/26 9:15 p.m.•17 views

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

9.8CVSS7.6AI score0.69663EPSS
SaveExploits1References2
Prion
Prion
•added 2023/03/26 9:15 p.m.•39 views

Command injection

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

7.5CVSS9.8AI score0.69663EPSS
SaveExploits1References1Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/26 12:00 a.m.•0 views

CVE-2023-26801: Improper Neutralization of Special Elements used in a Command

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

9.8CVSS8.2AI score0.69663EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/03/26 12:00 a.m.•45 views

CVE-2023-26801

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

10AI score0.69663EPSS
SaveExploits1References2
Rows per page
Query Builder