Read the docs
TI-2024-30336 Aliases CVE-2024-45261GHSA-2f8j-394w-hvgc

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

Priority LOW 37CWE-863Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-863.

Summary

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not tied to that user itself, which allows other users to potentially use it for authentication. Once an attacker bypasses the application's authentication procedures, they can generate a valid SID, escalate privileges, and gain full control.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00494 42nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 42

CPEVersionsRoleVendor
cpe:2.3:o:gl-inet:mt2500_firmware:*:*:*:*:*:*:*:*4.6.2 to before 4.6.4VulnerableGL.iNet
cpe:2.3:h:gl-inet:mt2500:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:axt1800_firmware:*:*:*:*:*:*:*:*4.6.2 to before 4.6.4VulnerableGL.iNet
cpe:2.3:h:gl-inet:axt1800:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:ax1800_firmware:*:*:*:*:*:*:*:*4.6.2 to before 4.6.4VulnerableGL.iNet
cpe:2.3:h:gl-inet:ax1800:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:b3000_firmware:4.5.18:*:*:*:*:*:*:*4.5.18VulnerableGL.iNet
cpe:2.3:h:gl-inet:b3000:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:a1300_firmware:4.5.17:*:*:*:*:*:*:*4.5.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:a1300:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
  • cpe:2.3:o:gl-inet:mt2500_firmware:*:*:*:*:*:*:*:* Versions 4.6.2 to before 4.6.4 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:mt2500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:axt1800_firmware:*:*:*:*:*:*:*:* Versions 4.6.2 to before 4.6.4 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:axt1800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:ax1800_firmware:*:*:*:*:*:*:*:* Versions 4.6.2 to before 4.6.4 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:ax1800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:b3000_firmware:4.5.18:*:*:*:*:*:*:* Versions 4.5.18 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:b3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:a1300_firmware:4.5.17:*:*:*:*:*:*:* Versions 4.5.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:a1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
Show 32 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:gl-inet:x300b_firmware:4.5.17:*:*:*:*:*:*:*4.5.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:x300b:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:x3000_firmware:4.4.9:*:*:*:*:*:*:*4.4.9VulnerableGL.iNet
cpe:2.3:h:gl-inet:x3000:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:xe3000_firmware:4.4.9:*:*:*:*:*:*:*4.4.9VulnerableGL.iNet
cpe:2.3:h:gl-inet:xe3000:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:x750_firmware:4.3.18:*:*:*:*:*:*:*4.3.18VulnerableGL.iNet
cpe:2.3:h:gl-inet:x750:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:sft1200_firmware:4.3.18:*:*:*:*:*:*:*4.3.18VulnerableGL.iNet
cpe:2.3:h:gl-inet:sft1200:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:mt1300_firmware:4.3.18:*:*:*:*:*:*:*4.3.18VulnerableGL.iNet
cpe:2.3:h:gl-inet:mt1300:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:e750_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:e750:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:xe300_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:xe300:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:ar750_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:ar750:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:ar750s_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:ar750s:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:ar300m_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:ar300m:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:mt300n-v2_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:mt300n-v2:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:mt3000_firmware:4.6.2:*:*:*:*:*:*:*4.6.2VulnerableGL.iNet
cpe:2.3:h:gl-inet:gl-mt3000:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:ar300m16_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:ar300m16:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:mt6000_firmware:4.6.2:*:*:*:*:*:*:*4.6.2VulnerableGL.iNet
cpe:2.3:h:gl-inet:mt6000:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
cpe:2.3:o:gl-inet:b1300_firmware:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableGL.iNet
cpe:2.3:h:gl-inet:b1300:-:*:*:*:*:*:*:*not specified by NVDRunning onGL.iNet
  • cpe:2.3:o:gl-inet:x300b_firmware:4.5.17:*:*:*:*:*:*:* Versions 4.5.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:x300b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:x3000_firmware:4.4.9:*:*:*:*:*:*:* Versions 4.4.9 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:x3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:xe3000_firmware:4.4.9:*:*:*:*:*:*:* Versions 4.4.9 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:xe3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:x750_firmware:4.3.18:*:*:*:*:*:*:* Versions 4.3.18 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:x750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:sft1200_firmware:4.3.18:*:*:*:*:*:*:* Versions 4.3.18 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:sft1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:mt1300_firmware:4.3.18:*:*:*:*:*:*:* Versions 4.3.18 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:mt1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:e750_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:e750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:xe300_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:xe300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:ar750_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:ar750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:ar750s_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:ar750s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:ar300m_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:ar300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:mt300n-v2_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:mt300n-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:mt3000_firmware:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:gl-mt3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:ar300m16_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:ar300m16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:mt6000_firmware:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:mt6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet
  • cpe:2.3:o:gl-inet:b1300_firmware:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·GL.iNet
  • cpe:2.3:h:gl-inet:b1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GL.iNet

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-45261
  2. 2026-10-03 Alias added: GHSA-2f8j-394w-hvgc

References

Exploit 1

  • TI-2024-26219 GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750… CVSS 3.1CRITICAL 9.8
  • TI-2024-30337 An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500… CVSS 3.1HIGH 8.8
  • TI-2024-30335 An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500… CVSS 3.1HIGH 8.0
  • TI-2024-26217 GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750… CVSS 3.1CRITICAL 9.8
  • TI-2024-26218 GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750… CVSS 3.1CRITICAL 9.8
  • TI-2024-18193 An issue was discovered on certain GL-iNet devices. CVSS 3.1HIGH 7.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences