GL.iNet

Records93All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

GL.iNet records in CISA KEV

No GL.iNet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ar300m16 Firmware 17 records HIGH Gl-ax1800 Firmware 16 records HIGH Gl-ar300m Firmware 15 records HIGH Ax1800 Firmware 14 records HIGH Gl-ar750s Firmware 14 records HIGH Gl-axt1800 Firmware 13 records HIGH Gl-mt3000 Firmware 13 records HIGH Gl-mt300n-v2 Firmware 13 records HIGH

Records

15 records in Gl-ar300m Firmware · all components

TI-2023-27815 CVE-2023-50919 · GHSA-3vmx-5x6r-25cw

An issue was discovered on GL.iNet devices before version 4.5.0.

HIGH 82

An issue was discovered on GL.iNet devices before version 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.47804 Published 2024-01-12 No fix listed CWE-287

TI-2023-15082 CVE-2023-31471 · GHSA-jxjx-jw7q-vw57

An issue was discovered on GL.iNet devices before 3.216.

HIGH 82

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01053 Published 2023-05-10 No fix listed

TI-2023-15086 CVE-2023-31475 · GHSA-27c8-cpgv-r39p

An issue was discovered on GL.iNet devices before 3.216.

HIGH 76

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13743 Published 2023-05-11 No fix listed CWE-120

TI-2023-15088 CVE-2023-31477 · GHSA-xcr9-xmx6-j7fh

A path traversal issue was discovered on GL.iNet devices before 3.216.

HIGH 72

A path traversal issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0094 Published 2023-05-11 No fix listed CWE-22

TI-2023-25017 CVE-2023-46455 · GHSA-vq7h-4q4f-453x

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files…

HIGH 69

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.46966 Published 2023-12-12 No fix listed CWE-22

TI-2023-15083 CVE-2023-31472 · GHSA-2j86-h6vf-9889

An issue was discovered on GL.iNet devices before 3.216.

HIGH 68

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19884 Published 2023-05-09 No fix listed CWE-770

TI-2023-27818 CVE-2023-50922 · GHSA-74p2-cxrg-rcxq

An issue was discovered on GL.iNet devices through 4.5.0.

HIGH 67

An issue was discovered on GL.iNet devices through 4.5.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2024-01-03 No fix listed CWE-434

TI-2023-15089 CVE-2023-31478 · GHSA-grvf-mjv4-48x8

An issue was discovered on GL.iNet devices before 3.216.

HIGH 66

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.29699 Published 2023-05-09 No fix listed

TI-2023-15085 CVE-2023-31474 · GHSA-xgmf-7522-grcf

An issue was discovered on GL.iNet devices before 3.216.

HIGH 66

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00822 Published 2023-05-09 No fix listed

TI-2023-25018 CVE-2023-46456 · GHSA-2r38-xghh-6j8m

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell…

MEDIUM 63

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24725 Published 2023-12-12 No fix listed CWE-74

TI-2023-25016 CVE-2023-46454 · GHSA-56fm-mg9v-8c3h

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary…

MEDIUM 62

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23466 Published 2023-12-12 No fix listed CWE-78

TI-2023-27816 CVE-2023-50920 · GHSA-pxmv-x94g-j48f

An issue was discovered on GL.iNet devices before version 4.5.0.

MEDIUM 58

An issue was discovered on GL.iNet devices before version 4.5.0.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00196 Published 2024-01-12 No fix listed CWE-384

TI-2023-15084 CVE-2023-31473 · GHSA-52cq-m3mg-849p

An issue was discovered on GL.iNet devices before 3.216.

MEDIUM 56

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03869 Published 2023-05-11 No fix listed CWE-77

TI-2023-27591 CVE-2023-50445 · GHSA-r64h-95wm-rrfq

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000…

MEDIUM 48

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09123 Published 2023-12-28 No fix listed CWE-77

TI-2023-27817 CVE-2023-50921 · GHSA-j7h9-fx4j-q5vr

An issue was discovered on GL.iNet devices through 4.5.0.

MEDIUM 43

An issue was discovered on GL.iNet devices through 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2024-01-03 No fix listed CWE-269

Open these records in search →