CVEvulnerability

CVE-2023-31477

7.5 HIGH Published 2023-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22

Description

A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path.

Affected configurations

• gl-inet gl-s20 firmware (< 3.216) • gl-inet gl-x3000 firmware (< 3.216) • gl-inet gl-mt3000 firmware (< 3.216) • gl-inet gl-mt2500 firmware (< 3.216) • gl-inet gl-mt2500a firmware (< 3.216) • gl-inet gl-axt1800 firmware (< 3.216) • gl-inet gl-a1300 firmware (< 3.216) • gl-inet gl-ax1800 firmware (< 3.216) • gl-inet gl-sft1200 firmware (< 3.216) • gl-inet gl-mt1300 firmware (< 3.216) • gl-inet gl-e750 firmware (< 3.216) • gl-inet gl-mv1000 firmware (< 3.216) • gl-inet gl-mv1000w firmware (< 3.216) • gl-inet gl-s10 firmware (< 3.216) • gl-inet gl-s200 firmware (< 3.216) • gl-inet gl-s1300 firmware (< 3.216) • gl-inet gl-sf1200 firmware (< 3.216) • gl-inet gl-b1300 firmware (< 3.216) • gl-inet gl-b2200 firmware (< 3.216) • gl-inet gl-ap1300 firmware (< 3.216) • gl-inet gl-ap1300lte firmware (< 3.216) • gl-inet gl-x1200 firmware (< 3.216) • gl-inet gl-x750 firmware (< 3.216) • gl-inet gl-x300b firmware (< 3.216) • gl-inet gl-xe300 firmware (< 3.216) • gl-inet gl-ar750s firmware (< 3.216) • gl-inet gl-ar750 firmware (< 3.216) • gl-inet gl-mifi firmware (< 3.216) • gl-inet gl-mt300n-v2 firmware (< 3.216) • gl-inet gl-ar300m firmware (< 3.216) • gl-inet gl-usb150 firmware (< 3.216) • gl-inet microuter-n300 firmware (< 3.216)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References