CVE-2025-45984 | Blink BL-X26_DA3 sub_45B238 routepwd command injection

June 13, 2025 Yanac

A vulnerability classified as critical was found in Blink BL-WR9000, BL-AC1900, BL-AC2100_AZ3, BL-X10_AC8, BL-LTE300, BL-F1200_AT1, BL-X26_AC8, BLAC450M_AE4 and BL-X26_DA3. This vulnerability affects the function sub_45B238. The manipulation of the argument routepwd leads to command injection.

This vulnerability was named CVE-2025-45984. The attack needs to be done within the local network. There is no exploit available.VulDB Recent EntriesRead More