Back to feed
EUVD-2024-24560 · Published Feb 27, 2024
An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.
Technologies
Gl-Inet Ar300M16Gl-Inet N300Gl-Inet Mt2500 FirmwareGl-Inet X3000 FirmwareGl-Inet Xe300 FirmwareGl-Inet A1300Gl-Inet S1300Gl-Inet Mt1300 FirmwareGl-Inet B2200Gl-Inet Axt1800Gl-Inet Ar300M FirmwareGl-Inet Ar750S FirmwareGl-Inet X300BGl-Inet Mv1000 FirmwareGl-Inet Xe3000Gl-Inet Ar750Gl-Inet Sf1200 FirmwareGl-Inet X3000Gl-Inet Mt6000 FirmwareGl-Inet X750 FirmwareGl-Inet Xe300Gl-Inet S200 FirmwareGl-Inet X300B FirmwareGl-Inet X1200 FirmwareGl-Inet Ax1800 FirmwareGl-Inet Mt300N-V2 FirmwareGl-Inet X750Gl-Inet Mt2500Gl-Inet Axt1800 FirmwareGl-Inet Ax1800Gl-Inet Ar750SGl-Inet N300 FirmwareGl-Inet S200Gl-Inet B1300 FirmwareGl-Inet Sft1200Gl-Inet Mt1300Gl-Inet A1300 FirmwareGl-Inet Mt300N-V2Gl-Inet Sft1200 FirmwareGl-Inet Sf1200Gl-Inet Ar300M16 FirmwareGl-Inet B2200 FirmwareGl-Inet Xe3000 FirmwareGl-Inet Ar300MGl-Inet Ar750 FirmwareGl-Inet B1300Gl-Inet Mt3000 FirmwareGl-Inet Mv1000Gl-Inet Mt6000Gl-Inet S1300 FirmwareGl-Inet Mt3000Gl-Inet X1200
Weaknesses
CWE-200
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
