CVE-2025-7564

LB-LINK BL-AC3600 shadow hard-coded credentials

View on CVE.org
Published Jul 14, 2025 CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Description
A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-21303 A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
History
Type Values Removed Values Added
First Time appeared Lb-link
Lb-link bl-ac3600
Lb-link bl-ac3600 Firmware
CPEs cpe:2.3:h:lb-link:bl-ac3600:-:*:*:*:*:*:*:*
cpe:2.3:o:lb-link:bl-ac3600_firmware:*:*:*:*:*:*:*:*
Vendors & Products Lb-link
Lb-link bl-ac3600
Lb-link bl-ac3600 Firmware
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Metrics epss

{'score': 0.0001}
Type Values Removed Values Added
Description A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title LB-LINK BL-AC3600 shadow hard-coded credentials
Weaknesses CWE-259
CWE-798
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jul 14, 2025, 2:47 PM
Reserved
Jul 12, 2025, 9:11 PM

View source JSON

Updated
Jul 14, 2025, 2:47 PM

JSON

Status
Analyzed
Published
Jul 14, 2025, 3:15 AM
Modified
Oct 18, 2026, 9:10 PM

View source JSON

No data.

No data.