Submit #501023: LB-LINK LB-LINK AC1900 router V1.0.2 Command Injectioninfo

TitleLB-LINK LB-LINK AC1900 router V1.0.2 Command Injection
DescriptionIn the LB-LINK ac1900 router with the firmware version of V1.0.2, there is a command injection vulnerability in the route /goform/set_cmd, which may lead to remote arbitrary code execution.
Source⚠️ https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_cmd-_-bs_SetCmd-_CI-179898c94eac808e8875e0b8e1bee47e?pvs=74
User
 h0lyduck (UID 81489)
Submission02/14/2025 11:43 AM (3 months ago)
Moderation02/23/2025 07:57 AM (9 days later)
StatusAccepted
VulDB Entry296599 [LB-LINK AC1900 Router 1.0.2 /goform/set_cmd websGetVar os command injection]
Points14

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!