+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: CVE-2025-45984 - Blink Command Injection Vulnerability (/showthread.php?tid=6300534)
CVE-2025-45984 - Blink Command Injection Vulnerability - Stanley - Jun 15, 2025
CVE-2025-45984 - Blink Command Injection Vulnerability
CVE ID : CVE-2025-45984
Published : June 13, 2025, 12:15 p.m. | 2 days, 14 hours ago
Description : Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_AC8 V1.2.8, BLAC450M_AE4 V4.0.0 and BL-X26_DA3 V1.2.7 were discovered to contain a command injection vulnerability via the routepwd parameter in the sub_45B238 function.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
https://cvefeed.io/vuln/detail/CVE-2025-45984
RE: CVE-2025-45984 - Blink Command Injection Vulnerability - Bastille - Jun 16, 2025
Didn't know these routeurs, thanks for the share Stanley
RE: CVE-2025-45984 - Blink Command Injection Vulnerability - skull - Jun 17, 2025
Interesting, this is one critical one.
Allowing attackers to access your router, that calls for all kind of trouble.
I’m still amazed how routers often yet don’t auto update the software.