critical9.8
CVE-2025-29062
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead …
Impact
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lb-Link | Bl-Ac2100 Firmware | through 1.0.4 |