PT-2025-25407 · Blink · Lb-Link Bl-Wr9000+7

Published 2025-04-12 · Updated 2025-07-10 · CVE-2025-45987

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Blink BL-WR9000 version 2.4.9 Blink BL-AC2100 AZ3 version 1.0.4 Blink BL-X10 AC8 version 1.0.5 Blink BL-LTE300 version 1.2.3 Blink BL-F1200 AT1 version 1.0.0 Blink BL-X26 AC8 version 1.2.8 Blink BLAC450M AE4 version 4.0.0 Blink BL-X26 DA3 version 1.2.7

Description The issue concerns multiple command injection vulnerabilities found in various Blink router models. These vulnerabilities can be exploited through the dns1 and dns2 parameters in the bs SetDNSInfo function.

Recommendations For Blink BL-WR9000 version 2.4.9, update the firmware to a version that fixes the command injection vulnerability. For Blink BL-AC2100 AZ3 version 1.0.4, update the firmware to a version that fixes the command injection vulnerability. For Blink BL-X10 AC8 version 1.0.5, update the firmware to a version that fixes the command injection vulnerability. For Blink BL-LTE300 version 1.2.3, update the firmware to a version that fixes the command injection vulnerability. For Blink BL-F1200 AT1 version 1.0.0, update the firmware to a version that fixes the command injection vulnerability. For Blink BL-X26 AC8 version 1.2.8, update the firmware to a version that fixes the command injection vulnerability. For Blink BLAC450M AE4 version 4.0.0, update the firmware to a version that fixes the command injection vulnerability. For Blink BL-X26 DA3 version 1.2.7, update the firmware to a version that fixes the command injection vulnerability. As a temporary workaround, consider restricting access to the bs SetDNSInfo function to minimize the risk of exploitation. Avoid using the dns1 and dns2 parameters in the affected function until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-06883

CVE-2025-45987

Affected Products

Blink Bl-Ac2100 Az3

Blink Bl-F1200 At1

Lb-Link Bl-Lte300

Lb-Link Bl-Wr9000

Blink Bl-X10 Ac8

Blink Bl-X26 Ac8

Blink Bl-X26 Da3

Blink Blac450M Ae4

References · 9

• 🔥 https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_dns1%20Unauthorized%20command%20injection/The%20LB-LINK_dns1%20command%20is%20used%20to%20inject%20the%20information.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-45987 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-45987 · Security Note
• https://bdu.fstec.ru/vul/2025-06883 · Security Note
• https://twitter.com/SecAideInfo/status/1934555832651325819 · Twitter Post
• https://t.me/cvetracker/26182 · Telegram Post
• https://t.me/latest_high_impact_cve/2647 · Telegram Post
• https://t.me/cvenotify/128323 · Telegram Post
• https://t.me/cvenotify/125607 · Telegram Post