The LB-LINK BL-AC3600 router is vulnerable to a hard-coded credential flaw that allows unauthorized local users to gain administrative control over the device.

This vulnerability is caused by the presence of hard-coded credentials (CWE-798) within the /etc/shadow system file. Successful exploitation requires local access to the device and enables an attacker to authenticate with elevated privileges.

The presence of hard-coded credentials poses a significant risk to the integrity and security of the network infrastructure. With a CVSS score of 7.8, this flaw could allow an attacker with local access to bypass security controls, leading to total compromise of the router. This may result in unauthorized network traffic interception, persistent backdoors, or the complete loss of administrative control over the affected hardware.

Immediate Action: As no official patch is currently available from the vendor, administrators should restrict physical and logical access to the device to trusted personnel only.

Proactive Monitoring: Monitor device access logs for unusual login activity or unauthorized attempts to access sensitive system files like /etc/shadow.

Compensating Controls: Implement network segmentation to isolate the affected router from critical internal assets, limiting the potential blast radius of a compromised device.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the research write-up by the vulnerability reporter.

Given the severity of this vulnerability and the lack of a vendor-provided patch, immediate mitigation is required. Organizations using the LB-LINK BL-AC3600 should evaluate the necessity of the device in their network architecture and consider replacing it with a supported alternative if the risk to the environment is deemed unacceptable.