CRITICAL

CVE-2025-45987

CVSS v3

9.8

CRITICAL

EPSS Score

11.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bs_SetDNSInfo function.

Technical details

CVSS v3 Vector
3.1
Published
6/13/2025
Last Modified
7/10/2025

Frequently asked questions

What is CVE-2025-45987?

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bs_SetDNSInfo function.

Is CVE-2025-45987 actively exploited?

Active exploitation of CVE-2025-45987 has not been confirmed. The EPSS score is 11.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2025-45987?

CVE-2025-45987 has a CVSS v3 base score of 9.8 (CRITICAL severity), with vector string 3.1.

Is CVE-2025-45987 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs

Other 2025 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database