CVE-2025-45988 | Via BL-X26_DA3 bs_SetCmd cmd command injection (EUVD-2025-18261)

A vulnerability was found in Via BL-WR9000, BL-AC2100_AZ3, BL-X10_AC8, BL-LTE300, BL-F1200_AT1, BL-X26_AC8, BLAC450M_AE4 and BL-X26_DA3 and classified as critical. Affected by this issue is the function bs_SetCmd. The manipulation of the argument cmd leads to command injection.

This vulnerability is handled as CVE-2025-45988. The attack may be launched remotely. There is no exploit available.