What is the CVSS score of CVE-2025-45988?

CVE-2025-45988 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 3.0%.

Is there a public PoC exploit available for CVE-2025-45988?

Yes, a public proof-of-concept exploit is available for CVE-2025-45988. Prioritise patching immediately. EPSS: 3.0%.

How to fix or mitigate CVE-2025-45988?

Within 24 hours: Identify and inventory all affected Blink router models in your environment and isolate them from critical network segments if possible. Within 7 days: Implement network segmentation to restrict router management access and monitor for suspicious command injection attempts targeting the bs_SetCmd function. Within 30 days: Replace affected routers with patched alternatives or models from vendors with available security updates, and conduct network forensics to detect any prior compromise.

IoT CVE-2025-45988

EUVD-2025-18261 CRITICAL

Command Injection (CWE-77)

2025-06-13 cve@mitre.org

RCE Command Injection IoT Bl Ac1900 Firmware Bl Ac2100 Az3 Firmware Bl F1200 At1 Firmware Bl Lte300 Firmware Bl Wr9000 Firmware Bl X10 Ac8 Firmware Bl X26 Ac8 Firmware Bl X26 Da3 Firmware Blac450m Ae4 Firmware B Link

9.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-77 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization Command injection prevention MITRE ATT&CK 1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	CVSS 9.8. EPSS 3.0%. Public PoC/exploit available. No patch confirmed.
Exploit ScenarioDerived	An attacker could exploit this vulnerability in the affected application to compromise the security of affected deployments, potentially impacting confidentiality, integrity, or availability.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

No patch listed yet 3.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 14, 2026

A command injection vulnerability (CVSS 9.8). Risk factors: public PoC available.

Earlier versions of this analysis (1)

v1 Mar 14, 2026 - 21:34 CVSS 9.8

RemediationAI

Monitor vendor channels for patch availability. Implement input validation and WAF rules as interim mitigation.

Affected VersionsENISA

n/a n/a

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

CWE-77 (Command Injection). CVSS 9.8 indicates critical severity with likely remote exploitation vector.

Know when IoT gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Jul 10, 2025 - 12:16 vuln.today

Public exploit code

CVE Published

Jun 13, 2025 - 12:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function.

Executive ViewAI

Why It Matters

A critical vulnerability affecting multiple Blink router models allows remote attackers to execute arbitrary commands with a CVSS score of 9.8, potentially enabling complete network compromise. Organizations using affected Blink routers face immediate risk of unauthorized access, data theft, and lateral movement into internal networks, with active public exploits already available.

Business Impact: Severe

Compensating Controls

Implement WAF rules to block requests containing command injection patterns in the cmd parameter; restrict administrative access to routers via network ACLs and VPNs only; disable remote management features if not required; deploy IDS/IPS signatures to detect bs_SetCmd exploitation attempts; implement network segmentation to isolate router management traffic; monitor router logs for suspicious activity; consider temporary replacement with alternative router hardware pending vendor patch availability.

Threat Intelligence Overview

EPSS Score

3.0%

Top 14% exploitable

Exploit

POC

Public exploit code exists

Data Quality

5 sources

Confidence: Medium

EUVD

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 3.0%

Patch available No

Active threat No

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Out-of-Cycle

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact

Very High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +3

CVSS: +49

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

OS Command Injection CRITICAL

OS command injection occurs when an application passes unsanitized user input directly into system shell commands.

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

More in IoT

View all

CVE-2026-29128 CRITICAL Act Now POC

10.0 Mar 05

Plaintext daemon credentials in IDC SFX2100 routing config files (zebra, bgpd, ospfd, ripd). CVSS 10.0. PoC available.

CVE-2025-65294 CRITICAL Act Now POC

9.8 Dec 10

Remote command execution in Aqara Hub firmware (Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025) stem

CVE-2025-63624 CRITICAL Act Now POC

9.8 Feb 03

Kede Electronics IoT smart water meter monitoring platform v1.0 has a SQL injection allowing attackers to compromise the

CVE-2026-101076 CRITICAL Act Now POC

9.3 Sep 28

An unauthenticated OS command injection in the CGI handler of Netcore NR289-GE firmware 1.4.5102 lets remote attackers e

CVE-2026-101077 CRITICAL Act Now POC

9.3 Sep 28

Unauthenticated network attackers can bypass authentication in the Netcore NR289-GE router's boa_temp web handler and ab

CVE-2026-101075 CRITICAL Act Now POC

9.3 Sep 28

Remote unauthenticated OS command injection in Netcore NR289-GE firmware 1.4.5102 allows attackers to execute arbitrary

CVE-2026-101072 CRITICAL Act Now POC

9.3 Sep 28

Unauthenticated OS command injection in the Netcore NR289-GE router (firmware 1.4.5102) lets any remote attacker who can

CVE-2026-101039 CRITICAL Act Now POC

9.3 Sep 28

A stack-based buffer overflow in the devdiscover service of FAST FAC1900R firmware 20190827_2.0.2 lets unauthenticated r

CVE-2026-25139 CRITICAL Act Now POC

9.1 Feb 04

RIOT IoT operating system has an out-of-bounds read vulnerability (CVSS 9.1) that could lead to information disclosure o

CVE-2026-102792 HIGH This Week POC

8.5 Sep 29

Command injection in the Ziroom ZHOME A0101 smart-home hub (firmware 1.0.1.0) allows an attacker with high-privilege aut

CVE-2026-102793 HIGH This Week POC

8.5 Sep 29

Authenticated command injection in Ziroom ZHOME A0101 firmware 1.0.1.0 lets a privileged user execute arbitrary operatin

CVE-2026-101261 HIGH This Week POC

8.5 Sep 28

OS command injection in the Ziroom ZHOME A0101 smart-home device (firmware 1.0.1.0) allows an attacker who can reach the

Same weakness CWE-77 – Command Injection

View all

CVE-2024-21887 CRITICAL POC

9.1

CVE-2016-3081 HIGH POC

8.1

CVE-2012-1823 CRITICAL POC

9.8

CVE-2016-1555 CRITICAL POC

9.8

CVE-2024-55956 CRITICAL POC

9.8

CVE-2015-2051 HIGH POC

8.8

CVE-2017-6327 HIGH POC

8.8

CVE-2023-34960 CRITICAL POC

9.8

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

10.0

CVE-2017-7269 CRITICAL POC

9.8

CVE-2022-47966 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2023-3519 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

References

Advisories & patches

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-45988

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back