CVE-2025-1609

Summary

CVE-2025-1609 is a critical vulnerability affecting the LB-LINK AC1900 Router 1.0.2. The issue lies within the websGetVar function of the /goform/set_cmd file, where the argument cmd is susceptible to os command injection. An attacker can exploit this remotely, leading to potential serious consequences. The vulnerability has been disclosed to the public, increasing the risk of exploitation. Despite early notification, the vendor has not responded to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.