Submit #501024: LB-LINK LB-LINK AC1900 router V1.0.2 Command Injectioninfo

TitleLB-LINK LB-LINK AC1900 router V1.0.2 Command Injection
DescriptionIn the LB-LINK ac1900 router with the firmware version of V1.0.2, there is a command injection vulnerability in the route /goform/set_blacklist, which may lead to remote arbitrary code execution.
Source⚠️ https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_blacklist-_-bs_SetMacBlack-_CI-179898c94eac802b9451fcb79aa668c3?pvs=74
User
 h0lyduck (UID 81489)
Submission02/14/2025 11:45 (1 Year ago)
Moderation02/23/2025 07:57 (9 days later)
StatusAccepted
VulDB entry296600 [LB-LINK AC1900 Router 1.0.2 /goform/set_blacklist websGetVar mac/enable os command injection]
Points14

Do you know our Splunk app?

Download it now for free!