[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-50921":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":48,"references":73,"score":75,"epss_score":76,"epss_percentile":77,"is_kev":78,"cisa_kev_date_added":79,"cisa_kev_due_date":79,"cisa_ssvc":80,"attack_mappings":90,"exploits":107},351060,"CVE-2023-50921","EUVD-2023-55652","An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.","2024-01-03T09:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",9.8,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",true,[22],"CWE-269",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47],"cpe:2.3:o:gl-inet:gl-ar750s_firmware:4.3.7:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-mt6000_firmware:4.5.0:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-mt2500_firmware:4.4.6:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-b1300_firmware:4.3.7:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-ar750:-:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:4.3.7:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-mt6000:-:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-axt1800:-:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-ar300m_firmware:4.3.7:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-mt2500:-:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-ax1800_firmware:4.4.6:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-b1300:-:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-mt1300:-:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-ar750_firmware:4.3.7:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-axt1800_firmware:4.4.6:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-a1300_firmware:4.4.6:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-ar750s:-:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-mt3000:-:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-a1300:-:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-mt3000_firmware:4.4.6:*:*:*:*:*:*:*","cpe:2.3:o:gl-inet:gl-mt1300_firmware:4.3.7:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-mt300n-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-ax1800:-:*:*:*:*:*:*:*","cpe:2.3:h:gl-inet:gl-ar300m:-:*:*:*:*:*:*:*",[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72],"Gl-Inet Gl-Ar750S Firmware","Gl-Inet Gl-Ax1800","Gl-Inet Gl-Mt3000","Gl-Inet Gl-Ar750 Firmware","Gl-Inet Gl-Ar750S","Gl-Inet Gl-Mt3000 Firmware","Gl-Inet Gl-Mt1300","Gl-Inet Gl-Ar300M Firmware","Gl-Inet Gl-Mt2500","Gl-Inet Gl-Axt1800 Firmware","Gl-Inet Gl-Mt6000 Firmware","Gl-Inet Gl-Mt6000","Gl-Inet Gl-Mt300N-V2","Gl-Inet Gl-Ar300M","Gl-Inet Gl-B1300 Firmware","Gl-Inet Gl-Mt1300 Firmware","Gl-Inet Gl-Mt300N-V2 Firmware","Gl-Inet Gl-B1300","Gl-Inet Gl-A1300 Firmware","Gl-Inet Gl-Ar750","Gl-Inet Gl-A1300","Gl-Inet Gl-Ax1800 Firmware","Gl-Inet Gl-Mt2500 Firmware","Gl-Inet Gl-Axt1800",[74],"https:\u002F\u002Fgithub.com\u002Fgl-inet\u002FCVE-issues\u002Fblob\u002Fmain\u002F4.0.0\u002FAdd_user_vulnerability.md",0.69,0.00519,0.43864,false,null,{"timestamp":81,"automatable":82,"tech_impact":83,"exploitation":84,"cisa_decision":85,"cisa_remediation_timeline":89},"2024-01-08T20:44:05.646160Z","no","total","none",{"vector":86,"decision":87,"priority":88},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T21:39:03.682296\u002F","track_star","medium","14D",[91,97],{"name":92,"source":93,"tactics":94,"technique_id":96},"Exploit Public-Facing Application","attack_vector",[95],"initial-access","T1190",{"name":98,"source":99,"cwe_ids":100,"tactics":101,"capec_ids":103,"technique_id":106},"Abuse Elevation Control Mechanism","capec",[22],[102],"privilege-escalation",[104,105],"CAPEC-122","CAPEC-233","T1548",[]]