Blink BL-WR9000
cpe:2.3:h:lb-link:bl-wr9000:*:*:*:*:*:*:*, +1 more
- V2.4.9
A command injection vulnerability has been identified in several models of Blink routers, including the BL-WR9000 V2.4.9, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5, BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BL-AC450M_AE4 v4.0.0, and BL-X26_DA3 v1.2.7. The vulnerability arises in the bs_SetSSIDHide function, allowing for unauthorized command injection.
Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the device.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.