GL.iNet

Records93All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

GL.iNet records in CISA KEV

No GL.iNet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ar300m16 Firmware 17 records HIGH Gl-ax1800 Firmware 16 records HIGH Gl-ar300m Firmware 15 records HIGH Ax1800 Firmware 14 records HIGH Gl-ar750s Firmware 14 records HIGH Gl-axt1800 Firmware 13 records HIGH Gl-mt3000 Firmware 13 records HIGH Gl-mt300n-v2 Firmware 13 records HIGH

Records

16 records in Gl-ax1800 Firmware · all components

TI-2023-27815 CVE-2023-50919 · GHSA-3vmx-5x6r-25cw

An issue was discovered on GL.iNet devices before version 4.5.0.

HIGH 82

An issue was discovered on GL.iNet devices before version 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.47804 Published 2024-01-12 No fix listed CWE-287

TI-2023-15082 CVE-2023-31471 · GHSA-jxjx-jw7q-vw57

An issue was discovered on GL.iNet devices before 3.216.

HIGH 82

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01053 Published 2023-05-10 No fix listed

TI-2023-15086 CVE-2023-31475 · GHSA-27c8-cpgv-r39p

An issue was discovered on GL.iNet devices before 3.216.

HIGH 76

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13743 Published 2023-05-11 No fix listed CWE-120

TI-2023-15088 CVE-2023-31477 · GHSA-xcr9-xmx6-j7fh

A path traversal issue was discovered on GL.iNet devices before 3.216.

HIGH 72

A path traversal issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0094 Published 2023-05-11 No fix listed CWE-22

TI-2023-15083 CVE-2023-31472 · GHSA-2j86-h6vf-9889

An issue was discovered on GL.iNet devices before 3.216.

HIGH 68

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19884 Published 2023-05-09 No fix listed CWE-770

TI-2023-27818 CVE-2023-50922 · GHSA-74p2-cxrg-rcxq

An issue was discovered on GL.iNet devices through 4.5.0.

HIGH 67

An issue was discovered on GL.iNet devices through 4.5.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2024-01-03 No fix listed CWE-434

TI-2023-15089 CVE-2023-31478 · GHSA-grvf-mjv4-48x8

An issue was discovered on GL.iNet devices before 3.216.

HIGH 66

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.29699 Published 2023-05-09 No fix listed

TI-2023-15085 CVE-2023-31474 · GHSA-xgmf-7522-grcf

An issue was discovered on GL.iNet devices before 3.216.

HIGH 66

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00822 Published 2023-05-09 No fix listed

TI-2022-13731 CVE-2022-31898 · GHSA-7jr9-w2r4-mr83

gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain…

HIGH 65

gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the ping_addr and trace_addr function parameters.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.15808 Published 2022-10-27 No fix listed CWE-78

TI-2023-27816 CVE-2023-50920 · GHSA-pxmv-x94g-j48f

An issue was discovered on GL.iNet devices before version 4.5.0.

MEDIUM 58

An issue was discovered on GL.iNet devices before version 4.5.0.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00196 Published 2024-01-12 No fix listed CWE-384

TI-2023-25664 CVE-2023-47464 · GHSA-r58c-f4xc-gqw4

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a…

MEDIUM 58

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.22593 Published 2023-11-30 No fix listed CWE-22

TI-2023-15084 CVE-2023-31473 · GHSA-52cq-m3mg-849p

An issue was discovered on GL.iNet devices before 3.216.

MEDIUM 56

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03869 Published 2023-05-11 No fix listed CWE-77

TI-2023-25663 CVE-2023-47463 · GHSA-vxh2-r3fh-mqh4

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a…

MEDIUM 51

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the gl_nas_sys authentication function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01277 Published 2023-11-30 No fix listed CWE-281

TI-2023-27591 CVE-2023-50445 · GHSA-r64h-95wm-rrfq

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000…

MEDIUM 48

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09123 Published 2023-12-28 No fix listed CWE-77

TI-2023-25662 CVE-2023-47462 · GHSA-6g4w-74pc-w2qf

Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote…

MEDIUM 45

Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01287 Published 2023-11-29 No fix listed CWE-276

TI-2023-27817 CVE-2023-50921 · GHSA-j7h9-fx4j-q5vr

An issue was discovered on GL.iNet devices through 4.5.0.

MEDIUM 43

An issue was discovered on GL.iNet devices through 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2024-01-03 No fix listed CWE-269

Open these records in search →