CyberRota Analysis
AI-GeneratedA command injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library affects the LB-LINK AC1900_AZ2 router, allowing unauthenticated users to execute arbitrary commands via specially crafted POST requests. While the severity is rated low, it poses a risk in environments where the device is exposed to untrusted networks. Network administrators managing this router model should prioritize applying mitigations to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where an actor is able to make a "POST /goform/set_LimitClient_cfg" call but does not already have administrative access to the device.