← Database

CVE-2025-45987

CRITICAL CVSS: 9.8 Published: 2025-06-13 Modified: 2026-06-17

Description

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bs_SetDNSInfo function.

Affected Platforms

B-Link Bl-X26 Ac8B-Link Bl-Lte300 FirmwareB-Link Bl-Wr9000B-Link Bl-Ac2100 Az3B-Link Bl-X26 Ac8 FirmwareB-Link Bl-Lte300B-Link Blac450M Ae4 FirmwareB-Link Bl-X26 Da3 FirmwareB-Link Bl-X26 Da3B-Link Bl-Wr9000 Firmware

Weakness Type

CWE-77

References