PT-2025-36919 · Lb Link · Lb-Link Bl-Cpe300M Ax300 4G Lte Router

Zyenra · Published 2025-09-09 · Updated 2025-10-10 · CVE-2025-57278

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: LB-Link BL-CPE300M AX300 4G LTE Router version BL-R8800 B10 ALK SL V01.01.02P42U14 06

Description: The LB-Link BL-CPE300M AX300 4G LTE Router does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP address, without requiring credentials or verifying client identity. The absence of session tokens, cookies, or unique identifiers allows an attacker to obtain full administrative access by configuring their device to use the same IP address as a previously authenticated user, resulting in a complete authentication bypass.

Recommendations: Update to a newer firmware version that implements secure session handling. As a temporary workaround, restrict access to the router's administrative interface to a limited set of trusted IP addresses.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-57278

Affected Products

Lb-Link Bl-Cpe300M Ax300 4G Lte Router

References · 6

• 🔥 https://zyenra.com/blog/improper-ip-bound-session-authentication-in-lb-link-cpe300m · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57278 · Security Note
• https://lb-link.com/CPE300M-AX300-4G-LTE-Router-pd502775568.html · Note
• https://twitter.com/CVEnew/status/1965691908615016801 · Twitter Post
• https://t.me/cveNotify/138200 · Telegram Post
• https://t.me/CVEtracker/32099 · Telegram Post