What is the CVSS score of EUVD-2025-18265?

EUVD-2025-18265 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 3.0%.

Which versions of Bl F1200 At1 Firmware are affected by EUVD-2025-18265?

A critical command injection vulnerability (CVE-2025-45984, CVSS 9.8) affects multiple Blink router models with active public exploits available.

Is there a public PoC exploit available for EUVD-2025-18265?

Yes, a public proof-of-concept exploit is available for EUVD-2025-18265. Prioritise patching immediately. EPSS: 3.0%.

How to fix or mitigate EUVD-2025-18265?

Within 24 hours: Identify all Blink router models in inventory using the affected versions list and isolate them from production networks if possible; alert network teams to monitor for exploitation attempts. Within 7 days: Implement compensating controls including network segmentation to restrict router administrative access and disable remote management features; contact Blink for patch timelines. Within 30 days: Develop replacement/upgrade plan for affected devices; conduct forensic analysis of logs for signs of compromise; test and deploy patches immediately upon release.

Bl F1200 At1 Firmware EUVD-2025-18265

| CVE-2025-45984 CRITICAL

Command Injection (CWE-77)

2025-06-13 cve@mitre.org

Command Injection RCE Netgear Bl F1200 At1 Firmware Bl Ac1900 Firmware Bl Wr9000 Firmware Bl X26 Da3 Firmware Bl X26 Ac8 Firmware Bl Lte300 Firmware Blac450m Ae4 Firmware Bl Ac2100 Az3 Firmware Bl X10 Ac8 Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 21:34 euvd

EUVD-2025-18265

Analysis Generated

Mar 14, 2026 - 21:34 vuln.today

PoC Detected

Jul 10, 2025 - 12:15 vuln.today

Public exploit code

CVE Published

Jun 13, 2025 - 12:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_AC8 V1.2.8, BLAC450M_AE4 V4.0.0 and BL-X26_DA3 V1.2.7 were discovered to contain a command injection vulnerability via the routepwd parameter in the sub_45B238 function.