CVE-2025-7574 - LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication

Back Back to CVE browser

CRITICAL

LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication

Published Jul 14, 2025

9.3

CRITICAL

CVSS 4.0

EPSS 0.83%

Description

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore of the file /cgi-bin/lighttpd.cgi of the component Web Interface. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor LB-Link Product BL-AC1900 Default
unknown
Affected
- 20250702
Vendor LB-Link Product BL-Ac2100 Az3 Default
unknown
Affected
- 20250702
Vendor LB-Link Product BL-AC3600 Default
unknown
Affected
- 20250702
Vendor LB-Link Product BL-AX1800 Default
unknown
Affected
- 20250702
Vendor LB-Link Product BL-Ax5400p Default
unknown
Affected
- 20250702
Vendor LB-Link Product BL-WR9000 Default
unknown
Affected
- 20250702

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
LB-Link	BL-AC1900	unknown	Affected 20250702
LB-Link	BL-Ac2100 Az3	unknown	Affected 20250702
LB-Link	BL-AC3600	unknown	Affected 20250702
LB-Link	BL-AX1800	unknown	Affected 20250702
LB-Link	BL-Ax5400p	unknown	Affected 20250702
LB-Link	BL-WR9000	unknown	Affected 20250702

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21310
Advisory
https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md
exploitrelated
https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md#poc
exploit
https://vuldb.com/?ctiid.316272
signaturepermissions-required
https://vuldb.com/?id.316272
vdb-entrytechnical-description
https://vuldb.com/?submit.608018
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21310		Advisory
https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md		exploitrelated
https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md#poc		exploit
https://vuldb.com/?ctiid.316272		signaturepermissions-required
https://vuldb.com/?id.316272		vdb-entrytechnical-description
https://vuldb.com/?submit.608018		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Jul 14, 2025

Updated Jul 14, 2025

Reserved Jul 13, 2025

Link CVE-2025-7574

CISA Vulnrichment

Updated Jul 14, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-7574

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Jul 14, 2025

Updated Jul 14, 2025

Link EUVD-2025-21310

GitHub

No data