Blink BL-WR9000
cpe:2.3:h:lb-link:bl-wr9000:*:*:*:*:*:*:*, +1 more
- V2.4.9
Multiple command injection vulnerabilities have been identified in various Blink router models, including the BL-WR9000, BL-AC2100_AZ3, BL-X10_AC8, BL-LTE300, BL-F1200_AT1, BL-X26_AC8, BL-AC450M_AE4, and BL-X26_DA3. These vulnerabilities arise from the 'cmd' parameter in the 'bs_SetCmd' function, allowing unauthorized command injection.
Exploitation of these vulnerabilities allows for unauthorized command injection on the affected routers.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.