CVEvulnerability

CVE-2024-27356

7.5 HIGH Published 2024-02-27 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-02-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200

Description

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.

Affected configurations

• gl-inet mt6000 firmware 4.5.5 • gl-inet xe3000 firmware 4.4.4 • gl-inet x3000 firmware 4.4.5 • gl-inet mt3000 firmware 4.5.0 • gl-inet mt2500 firmware 4.5.0 • gl-inet axt1800 firmware 4.5.0 • gl-inet ax1800 firmware 4.5.0 • gl-inet a1300 firmware 4.5.0 • gl-inet s200 firmware 4.1.4-0300 • gl-inet x750 firmware 4.3.7 • gl-inet sft1200 firmware 4.37 • gl-inet xe300 firmware 4.3.7 • gl-inet mt1300 firmware 4.3.10 • gl-inet ar750 firmware 4.3.10 • gl-inet ar750s firmware 4.3.10 • gl-inet ar300m firmware 4.3.10 • gl-inet ar300m16 firmware 4.3.10 • gl-inet b1300 firmware 4.3.10 • gl-inet mt300n-v2 firmware 4.3.10 • gl-inet x300b firmware 3.217 • gl-inet s1300 firmware 3.216 • gl-inet sf1200 firmware 3.216 • gl-inet mv1000 firmware 3.216 • gl-inet n300 firmware 3.216 • gl-inet b2200 firmware 3.216 • gl-inet x1200 firmware 3.203

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References