Advisories · Technology

LB-LINK BL-AC3600.

Every CVE that names LB-LINK BL-AC3600 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-7574 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication
- LB-LINK BL-AC1900
- LB-LINK BL-AC2100_AZ3
- Authentication bypass
Not analysed yet 14 Jul 2025
CVE-2025-7573 CVE record

CVSS 6.9 Medium

LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure
- LB-LINK BL-AC1900
- LB-LINK BL-AC2100_AZ3
- Information disclosure
- Broken access control
Not analysed yet 14 Jul 2025
CVE-2025-7572 CVE record

CVSS 6.9 Medium

LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure
- LB-LINK BL-AC1900
- LB-LINK BL-AC2100_AZ3
- Information disclosure
- Broken access control
Not analysed yet 14 Jul 2025
CVE-2025-7565 CVE record

CVSS 6.9 Medium

LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure
- LB-LINK BL-AC3600
- Information disclosure
- Broken access control
Not analysed yet 14 Jul 2025
CVE-2025-7564 CVE record

CVSS 8.5 High

LB-LINK BL-AC3600 shadow hard-coded credentials
- LB-LINK BL-AC3600
- Hard-coded credentials
Not analysed yet 14 Jul 2025
CVE-2025-4076 CVE record

CVSS 5.3 Medium

LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection
- LB-LINK BL-AC3600
- Other injection
- Command injection
Not analysed yet 29 Apr 2025