Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000…
Priority MEDIUM 48CWE-77Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-77.
Summary
Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local attackers to execute arbitrary code via the get_system_log and get_crash_log functions of the logread module, as well as the upgrade_online function of the upgrade module.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.09123 95th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 24
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:gl-inet:gl-mt1300_firmware:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-mt1300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-mt300n-v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-ar750s_firmware:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-ar750s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-ar750_firmware:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-ar750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-ar300m_firmware:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-ar300m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
- cpe:2.3:o:gl-inet:gl-mt1300_firmware:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-mt1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-mt300n-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-ar750s_firmware:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-ar750s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-ar750_firmware:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-ar750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-ar300m_firmware:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-ar300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
Show 14 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:gl-inet:gl-b1300_firmware:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-b1300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-mt6000_firmware:4.5.0:*:*:*:*:*:*:* | 4.5.0 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-mt6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-a1300_firmware:4.4.6:*:*:*:*:*:*:* | 4.4.6 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-a1300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-ax1800_firmware:4.4.6:*:*:*:*:*:*:* | 4.4.6 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-ax1800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-axt1800_firmware:4.4.6:*:*:*:*:*:*:* | 4.4.6 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-axt1800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-mt3000_firmware:4.4.6:*:*:*:*:*:*:* | 4.4.6 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-mt3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
| cpe:2.3:o:gl-inet:gl-mt2500_firmware:4.4.6:*:*:*:*:*:*:* | 4.4.6 | Vulnerable | GL.iNet |
| cpe:2.3:h:gl-inet:gl-mt2500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | GL.iNet |
- cpe:2.3:o:gl-inet:gl-b1300_firmware:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-b1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-mt6000_firmware:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-mt6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-a1300_firmware:4.4.6:*:*:*:*:*:*:* Versions 4.4.6 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-a1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-ax1800_firmware:4.4.6:*:*:*:*:*:*:* Versions 4.4.6 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-ax1800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-axt1800_firmware:4.4.6:*:*:*:*:*:*:* Versions 4.4.6 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-axt1800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-mt3000_firmware:4.4.6:*:*:*:*:*:*:* Versions 4.4.6 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-mt3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
- cpe:2.3:o:gl-inet:gl-mt2500_firmware:4.4.6:*:*:*:*:*:*:* Versions 4.4.6 Vulnerable ·GL.iNet
- cpe:2.3:h:gl-inet:gl-mt2500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-50445
- 2026-10-03 Alias added: GHSA-r64h-95wm-rrfq
References
More GL.iNet Gl-a1300 Firmware vulnerabilities
- TI-2023-27815 An issue was discovered on GL.iNet devices before version 4.5.0. CVSS 3.1CRITICAL 9.8
- TI-2023-15082 An issue was discovered on GL.iNet devices before 3.216. CVSS 3.1CRITICAL 9.8
- TI-2023-15086 An issue was discovered on GL.iNet devices before 3.216. CVSS 3.1CRITICAL 9.8
- TI-2023-15088 A path traversal issue was discovered on GL.iNet devices before 3.216. CVSS 3.1HIGH 7.5
- TI-2023-15083 An issue was discovered on GL.iNet devices before 3.216. CVSS 3.1HIGH 7.5
- TI-2023-27818 An issue was discovered on GL.iNet devices through 4.5.0. CVSS 3.1HIGH 7.2
Sources
- CVE-2023-50445 · CVE Program
- CVE-2023-50445 · NVD
- FIRST EPSS
- GHSA-r64h-95wm-rrfq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences