CVE-2025-10773

HIGH

B-Link BL-AC2100 < 1.0.3 - Stack-Based Buffer Overflow via Web Management Interface Type Parameter

Title source: llm
STIX 2.1

Description

A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.325129
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.325129
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.649901

Scores

CVSS v3 8.8
EPSS 0.0372
EPSS Percentile 88.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-121 CWE-787
Status published
Products (1)
lb-link/bl-ac2100_firmware < 1.0.3
Published Sep 22, 2025
Tracked Since Feb 18, 2026