CVE-2025-45988: Command Injection

Published Jun 13, 2025

Updated

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function.

Affected Software

26 affected components

Blink BL-WR9000

Blink BL-AC2100_AZ3

Blink BL-X10_AC8

Blink BL-LTE300

Blink BL-F1200_AT1

Blink BL-X26_AC8

Blink BLAC450M_AE4

Blink BL-X26_DA3

All of the following

B-LINK Bl-wr9000 Firmware=2.4.9

B-LINK Bl-wr9000

All of the following

B-LINK Bl-ac1900 Firmware=1.0.2

B-LINK Bl-ac1900

All of the following

B-LINK Bl-ac2100 Az3 Firmware=1.0.4

B-LINK Bl-ac2100 Az3

All of the following

B-LINK Bl-x10 Ac8 Firmware=1.0.5

B-LINK Bl-x10 Ac8

All of the following

B-LINK Bl-lte300 Firmware=1.2.3

B-LINK Bl-lte300

All of the following

B-LINK Bl-f1200 At1 Firmware=1.0.0

B-LINK Bl-f1200 At1

All of the following

B-LINK Bl-x26 Ac8 Firmware=1.2.8

B-LINK Bl-x26 Ac8

All of the following

B-LINK Blac450m Ae4 Firmware=4.0.0

B-LINK Blac450m Ae4

All of the following

B-LINK Bl-x26 Da3 Firmware=1.2.7

B-LINK Bl-x26 Da3

Event History

Jun 13, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-45988?

CVE-2025-45988 has been classified as a high severity vulnerability due to its potential for command injection attacks.

How do I fix CVE-2025-45988?

To mitigate CVE-2025-45988, update the affected Blink router models to their latest firmware versions as provided by the manufacturer.

What devices are affected by CVE-2025-45988?

CVE-2025-45988 affects multiple Blink router models including BL-WR9000, BL-AC2100_AZ3, BL-X10_AC8, BL-LTE300, BL-F1200_AT1, BL-X26_AC8, BLAC450M_AE4, and BL-X26_DA3.

What type of vulnerability is CVE-2025-45988?

CVE-2025-45988 is a command injection vulnerability that allows attackers to execute arbitrary commands via the cmd parameter.

What consequences can result from CVE-2025-45988?

Exploitation of CVE-2025-45988 can lead to unauthorized access and control over the affected Blink devices, compromising network security.

CVE-2025-45988: Command Injection

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-45988?

How do I fix CVE-2025-45988?

What devices are affected by CVE-2025-45988?

What type of vulnerability is CVE-2025-45988?

What consequences can result from CVE-2025-45988?

Company

Resources

Contact