CVE-2025-10773: B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflow
A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/setdelshrpathcfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10773?
CVE-2025-10773 is classified as a high-severity vulnerability due to its potential for remote code execution via stack-based buffer overflow.
How do I fix CVE-2025-10773?
To remediate CVE-2025-10773, update the B-Link BL-AC2100 firmware to version 1.0.4 or later, which addresses the buffer overflow issue.
What components are affected by CVE-2025-10773?
CVE-2025-10773 affects the Web Management Interface functionality in the B-Link BL-AC2100 router.
What is the attack vector for CVE-2025-10773?
The vulnerability in CVE-2025-10773 can be exploited through remote access to the Web Management Interface.
What does CVE-2025-10773 affect in B-Link BL-AC2100 devices?
CVE-2025-10773 affects the 'delshrpath' function within the firmware, leading to a buffer overflow vulnerability.