CVE-2025-7574: LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication
A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore of the file /cgi-bin/lighttpd.cgi of the component Web Interface. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7574?
CVE-2025-7574 is classified as a critical vulnerability.
How do I fix CVE-2025-7574?
To fix CVE-2025-7574, update your device firmware to a version released after 20250702.
Which devices are affected by CVE-2025-7574?
CVE-2025-7574 affects LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P, and BL-WR9000 devices running firmware up to 20250702.
What is the impact of CVE-2025-7574?
The vulnerability in CVE-2025-7574 allows attackers to manipulate the reboot/restore function of affected devices.
When was CVE-2025-7574 discovered?
CVE-2025-7574 was disclosed in 2025 and pertains to vulnerabilities identified in firmware versions up to 20250702.