Lb-Link Bl-AC3600 Firmware vulnerabilities

2 CVEs affecting Lb-Link Bl-AC3600 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7565, published 2025-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-7565, published 2025-07-14. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function geteasycfg of the file /cgi-bin/lighttpd.cgi of the component Web Management…
CVE-2025-7564, published 2025-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the…