A vulnerability, which was classified as critical, was found in Blink BL-WR9000, BL-AC2100_AZ3, BL-X10_AC8, BL-LTE300, BL-F1200_AT1, BL-X26_AC8, BLAC450M_AE4 and BL-X26_DA3. Affected is the function bs_SetMacBlack. The manipulation of the argument mac leads to command injection.

This vulnerability is traded as CVE-2025-45986. It is possible to launch the attack remotely. There is no exploit available.