| Название | Blink BL-AX5400P V1.0.19、BL-AX1800 V1.0.19、BL-AC3600 V1.0.22、BL-WR9000 V2.4.9、BL-AC1900 V1.0.2、BL-AC2100_AZ3 V1.0.4 BL-AX5400P V1.0.19、BL-AX1800 V1.0.19、BL-AC3600 V1.0.22、BL-WR9000 V2.4.9、BL-AC1900 V1.0.2、BL-AC2100_AZ3 V1.0.4 Incorrect |
|---|
| Описание | The Blink router's Web management interface contains a serious vulnerability of unverified identity permissions for sensitive operations. This vulnerability is not about bypassing existing authentication mechanisms, but rather the failure to verify the requester's identity and permissions when handling specific sensitive operations. Attackers can execute sensitive operations such as restart and factory reset through simple HTTP requests, leading to network service interruption and configuration data loss. |
|---|
| Источник | ⚠️ https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md |
|---|
| Пользователь | waiwai24 (UID 81637) |
|---|
| Представление | 02.07.2025 19:34 (1 Год назад) |
|---|
| Модерация | 13.07.2025 09:16 (11 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 316272 [LB-LINK BL-WR9000 до 20250702 Web Interface /cgi-bin/lighttpd.cgi reboot/restore слабая аутентификация] |
|---|
| Баллы | 20 |
|---|