← All advisories

Critical severity9.8NVD Advisory· Published May 2, 2023· Updated Jul 9, 2026

CVE-2023-29778

CVE-2023-29778

Description

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Gl Inet/Gl Mt3000 Firmware
cpe:2.3:o:gl-inet:gl-mt3000_firmware:4.1.0:release_2:*:*:*:*:*:*
Gl Inet/Gl Mt3000cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 4.1.0 Release 2

Patches

Vulnerability mechanics

References

1

github.com/OlivierLaflamme/cve/blob/main/GL.iNET/MT3000/get_nginx_log_RCE.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.