CVE-2025-1609

CVE-2025-1609 affects LB-LINK AC1900 Router firmware 1.0.2. The vulnerability lies in the websGetVar handling of the cmd parameter in /goform/set_cmd, enabling remote os command injection. Impact: potential remote compromise with high confidentiality, integrity, and availability implications as p...

CVE-2025-1610

LB-LINK AC1900 Router 1.0.2 is affected by an OS command injection in the websGetVar function of /goform/set_blacklist. The vulnerability stems from manipulating the mac/enable parameter, potentially allowing remote exploitation. The CVE is supported by multiple sources (NVD, Red Hat, CVE lists) ...

CVE-2025-1608

CVE-2025-1608 affects LB-LINK AC1900 Router (firmware 1.0.2). The vulnerable component is function websGetVar in /goform/set_manpwd, where manipulating the routepwd argument leads to OS command injection. The vulnerability can be exploited remotely and public exploits have been disclosed. Multipl...