CVE-2025-10773
A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Published:Sep 22, 2025
Last Modified:Sep 30, 2025
EPS:Sep 22, 2025
EPSS Score:0.00093
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Lb-link
Product
Bl-ac2100
Lb-link
Bl-ac2100
Vendor
Lb-link
Product
Bl-ac2100 Firmware
Lb-link
Bl-ac2100 Firmware
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
