| 标题 | Blink BL-AX5400P V1.0.19、BL-AX1800 V1.0.19、BL-AC3600 V1.0.22、BL-WR9000 V2.4.9、BL-AC1900 V1.0.2、BL-AC2100_AZ3 V1.0.4 BL-AX5400P V1.0.19、BL-AX1800 V1.0.19、BL-AC3600 V1.0.22、BL-WR9000 V2.4.9、BL-AC1900 V1.0.2、BL-AC2100_AZ3 V1.0.4 Incorrect |
|---|
| 描述 | The Blink router's Web management interface contains a serious vulnerability of unverified identity permissions for sensitive operations. This vulnerability is not about bypassing existing authentication mechanisms, but rather the failure to verify the requester's identity and permissions when handling specific sensitive operations. Attackers can execute sensitive operations such as restart and factory reset through simple HTTP requests, leading to network service interruption and configuration data loss. |
|---|
| 来源 | ⚠️ https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md |
|---|
| 用户 | waiwai24 (UID 81637) |
|---|
| 提交 | 2025-07-02 19時34分 (1 年前) |
|---|
| 管理 | 2025-07-13 09時16分 (11 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 316272 [LB-LINK BL-WR9000 直到 20250702 Web Interface /cgi-bin/lighttpd.cgi reboot/restore 弱身份验证] |
|---|
| 积分 | 20 |
|---|