Skip to content
OpenAdvisories

Product · LB-LINK

BL-AC3600

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-7573

    LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure

    A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This issue affects the function bs_GetManPwd in the library libblinkapi.so of the file /cgi-b…

    LB-LINK BL-AC3600 BL-WR9000 BL-AX1800
  • Medium 5.3
    CVE-2025-7572

    LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure

    A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This vulnerability affects the function bs_GetHostInfo in the library libblinkapi.so of the file /cgi-bin/ligh…

    LB-LINK BL-AC3600 BL-WR9000 BL-AX1800
  • Medium 5.3
    CVE-2025-7565

    LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure

    A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function geteasycfg of the file /cgi-bin/lighttpd.cgi of the component Web Management Interface. The manipulation of the argument Password leads t…

    LB-LINK BL-AC3600
  • Medium 6.3
    CVE-2025-4076 EPSS 20%

    LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection

    A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function easy_uci_set_option_string_0 of the file /cgi-bin/lighttpd.cgi of the component Password Handler. The manipulation of the argument routepwd lead…

    LB-LINK BL-AC3600