CVE-2025-7564

Name of the Vulnerable Software and Affected Versions LB-LINK BL-AC3600 version 1.0.22

Description A critical vulnerability exists in LB-LINK BL-AC3600 version 1.0.22. The issue affects some unknown functionality of the file /etc/shadow. Manipulation of the input root:blinkadmin leads to the exposure of hard-coded credentials. Local access is required for exploitation. The exploit has been publicly disclosed. The vendor was notified but did not respond.

Recommendations LB-LINK BL-AC3600 version 1.0.22: At the moment, there is no information about a newer version that contains a fix for this vulnerability.