High severity8.8NVD Advisory· Published Sep 22, 2025· Updated Apr 15, 2026

CVE-2025-57685

Description

The LB-Link routers, including the BL-AC2100_AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000_AE4 v2.4.9, BL-AC1900_AZ2 v1.0.2, BL-X26_AC8 v1.2.8, and BL-LTE300_DA4 V1.2.3 models, are vulnerable to unauthorized command injection. Attackers can exploit this vulnerability by accessing the /goform/set_serial_cfg interface to gain the highest level of device privileges without authorization, enabling them to remotely execute malicious commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mono7s/Lb Linkreferences
Lb Link/BL-AC2100_AZ3llm-create
Range: =1.0.4

Patches

Vulnerability mechanics

References

bl-ac2100.comnvd
github.com/mono7s/LB-Link/blob/main/bs_SetSerial.mdnvd
www.b-link.net.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000