CVE-2025-7574CWE-287

LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication

Critical · published July 14, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

🚨 A critical vulnerability lurking in LB-LINK routers allows attackers to remotely reboot your device without breaking a sweat! 🔥 Think of it like a hotel with a glitchy front desk system that lets anyone check in to any room without verification — all they need is the right keycode! This flaw could allow an attacker to remotely access and manipulate your device, leading to unauthorized changes and even complete control over your network. Imagine someone crashing your party and taking over your music playlist — chaos ensues!

Put simply

Think of it like a hotel with a glitchy front desk system that lets anyone check in to any room without verification — all they need is the right keycode! The vulnerability lies in the improper authentication of the reboot/restore function in the web interface of these routers. An attacker can exploit this by sending a specially crafted request to the device, bypassing the authentication checks entirely.

What to do

This flaw could allow an attacker to remotely access and manipulate your device, leading to unauthorized changes and even complete control over your network. Imagine someone crashing your party and taking over your music playlist — chaos ensues! To safeguard your network, update your LB-LINK routers to the latest firmware version released after July 2025. Ensure that default credentials are changed and consider enabling additional security measures like a firewall or VPN for added protection. You've got this! With these steps, you'll have your network locked down tight in no time. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00860 · 58.1th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-07-14T05:02Z
EPSS history
Timeline
  • 14 JUL 05:02Z
    LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication
    cvelistv5