CVE-2025-45987 | Blink BL-X26_DA3 bs_SetDNSInfo dns1/dns2 command injection

A vulnerability has been found in Blink BL-WR9000, BL-AC2100_AZ3, BL-X10_AC8, BL-LTE300, BL-F1200_AT1, BL-X26_AC8, BLAC450M_AE4 and BL-X26_DA3 and classified as critical. Affected by this vulnerability is the function bs_SetDNSInfo. The manipulation of the argument dns1/dns2 leads to command injection.

This vulnerability is known as CVE-2025-45987. The attack can be launched remotely. There is no exploit available.