Bl Cpe600Eu
Monthly
Unauthenticated remote retrieval of the Mifi_config.bin configuration backup from an LB-Link BL-CPE600EU running firmware 5.8.13 exposes stored device settings and credentials to anyone who can reach the device's management interface, an information-disclosure weakness (CWE-200) rooted in the Configuration Backup Handler's lack of access control. Exploitation requires only network reachability to the affected endpoint - no credentials, user interaction, or non-default configuration - but the real-world exposure window is narrow because NAT-bound units and devices with WAN-side management disabled cannot be reached from the internet, leaving LAN-adjacent or deliberately internet-exposed CPE units as the practical targets. Publicly available exploit code exists for this CVE, and the vendor was contacted but never responded, so no vendor-released patch has been identified at time of analysis; our independent assessment classifies this as a genuine but low-to-moderate priority issue rather than an urgent one.
Unauthenticated remote retrieval of the Mifi_config.bin configuration backup from an LB-Link BL-CPE600EU running firmware 5.8.13 exposes stored device settings and credentials to anyone who can reach the device's management interface, an information-disclosure weakness (CWE-200) rooted in the Configuration Backup Handler's lack of access control. Exploitation requires only network reachability to the affected endpoint - no credentials, user interaction, or non-default configuration - but the real-world exposure window is narrow because NAT-bound units and devices with WAN-side management disabled cannot be reached from the internet, leaving LAN-adjacent or deliberately internet-exposed CPE units as the practical targets. Publicly available exploit code exists for this CVE, and the vendor was contacted but never responded, so no vendor-released patch has been identified at time of analysis; our independent assessment classifies this as a genuine but low-to-moderate priority issue rather than an urgent one.