CVE-2025-10773
Last modified
CVE-2025-10773 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. EPSS estimates a 3.72% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Lb-Link | Bl-Ac2100 Firmware | <= 1.0.3 |
References
- https://github.com/maximdevere/CVE2/blob/main/README.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.325129Permissions Required, VDB Entry
- https://vuldb.com/?id.325129Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.649901Third Party Advisory, VDB Entry
- https://github.com/maximdevere/CVE2/blob/main/README.mdExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-10773?
How severe is CVE-2025-10773?
How do I fix CVE-2025-10773?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-10768A flaw has been found in h2oai h2o-3 up to 3.46.08. The impa…9.8
- CVE-2025-10769A vulnerability has been found in h2oai h2o-3 up to 3.46.08.…9.8
- CVE-2025-1077A security vulnerability has been identified in the IBL Soft…9.5
- CVE-2025-10770A vulnerability was found in jeecgboot JimuReport up to 2.1.…6.5
- CVE-2025-10771A vulnerability was determined in jeecgboot JimuReport up to…9.8
- CVE-2025-10772A vulnerability was identified in huggingface LeRobot up to …6.3
- CVE-2025-10774A weakness has been identified in Ruijie 6000-E10 up to 2.4.…4.7
- CVE-2025-10775A security vulnerability has been detected in Wavlink WL-NU5…7.2
- CVE-2025-10776A vulnerability was detected in LionCoders SalePro POS up to…3.7
- CVE-2025-10777A flaw has been found in JSC R7 R7-Office Document Server up…6.3
- CVE-2025-10778A vulnerability has been found in Smartstore up to 6.2.0. Th…3.1
- CVE-2025-10779A vulnerability was found in D-Link DCS-935L up to 1.13.01. …9.8
Are you affected by CVE-2025-10773?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST