CVE-2025-45985: b-link bl-wr9000

Record summary

CVE-2025-45985 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide function.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV: Listed · Sep 23, 2025 · VulnCheck
Reported exploitation: Observed · VulnCheck

Available material

Nuclei templates: 1

CISA SSVC decision

ExploitationPoC

AutomatableYes

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 13, 2025 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
bl-wr9000_firmware Browse b-link / bl-wr9000_firmware	VulnCheck	Version data not supplied

Nuclei templates

ProjectDiscoveryCRITICALBlink Router - Command InjectionCVSS 9.8

Impact

Unauthenticated attackers can execute arbitrary operating system commands through the enable parameter in the set_hidessid_cfg endpoint, achieving complete device compromise.

Remediation

Upgrade Blink router firmware to the latest version that properly sanitizes command parameters.

WeaknessesCWE-77

Authorsdarses

Template tagscvecve2025b-linkrceroutervkevvuln

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

FOFA: title="B-LINK"

https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_enable%20Unauthorized%20command%20injection/LB-LINK_enable%20command%20injection.md

Source: ProjectDiscovery

References

github.com