Blink Router Web Interface Unauthenticated Sensitive Operation Execution

Critical Vulnerability Information Vulnerability Title Privilege Control Defect in Blink Router Web Interface Permits Arbitrary Sensitive Operation Execution Author and Vendor BUG Author: waiwai Vendor: Blink Affected Products Multiple routers utilizing the libblinkapi.so component, including: BL-AX5400P V1.0.19 BL-AX1800 V1.0.19 BL-AC3600 V1.0.22 BL-WR9000 V2.4.9 BL-AC1900 V1.0.2 BL-AC2100_AZ3 V1.0.4 Vulnerability Description The Web management interface of Blink routers contains a severe privilege control flaw that allows execution of sensitive operations without authentication. Attackers can perform sensitive actions such as rebooting and restoring factory settings via simple HTTP requests, leading to network service disruption and loss of configuration data. Vulnerable API Endpoints POST - (System Reboot) POST - (Factory Settings Restore) Frontend Code Example POC Router service goes offline and waits for reboot Impact Immediate Consequences Network Service Interruption: System reboot causes complete loss of network connectivity Configuration Data Loss: Factory reset erases all customized settings Credential Loss: WiFi passwords and port forwarding configurations permanently deleted Access Control Compromise: Administrator credentials reverted to default factory values Secondary Impacts Operational Disruption: Network-dependent business operations experience downtime Security Exposure: Default settings post-reset may introduce security vulnerabilities Recovery Overhead: Requires full reconfiguration of the network

Goal Reached Thanks to every supporter — we hit 100%!

Blink Router Web Interface Unauthenticated Sensitive Operation Execution

More from this source