High severity7.5NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2023-31472

Description

An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gl Inet/Gl A1300 Firmware
cpe:2.3:o:gl-inet:gl-a1300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Ap1300 Firmware
cpe:2.3:o:gl-inet:gl-ap1300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Ap1300lte Firmware
cpe:2.3:o:gl-inet:gl-ap1300lte_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Ar300m Firmware
cpe:2.3:o:gl-inet:gl-ar300m_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Ar750 Firmware
cpe:2.3:o:gl-inet:gl-ar750_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Ar750s Firmware
cpe:2.3:o:gl-inet:gl-ar750s_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Ax1800 Firmware
cpe:2.3:o:gl-inet:gl-ax1800_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Axt1800 Firmware
cpe:2.3:o:gl-inet:gl-axt1800_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl B1300 Firmware
cpe:2.3:o:gl-inet:gl-b1300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl B2200 Firmware
cpe:2.3:o:gl-inet:gl-b2200_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl E750 Firmware
cpe:2.3:o:gl-inet:gl-e750_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mifi Firmware
cpe:2.3:o:gl-inet:gl-mifi_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mt1300 Firmware
cpe:2.3:o:gl-inet:gl-mt1300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mt2500 Firmware
cpe:2.3:o:gl-inet:gl-mt2500_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mt2500a Firmware
cpe:2.3:o:gl-inet:gl-mt2500a_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mt3000 Firmware
cpe:2.3:o:gl-inet:gl-mt3000_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mt300n V2 Firmware
cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mv1000 Firmware
cpe:2.3:o:gl-inet:gl-mv1000_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Mv1000w Firmware
cpe:2.3:o:gl-inet:gl-mv1000w_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl S10 Firmware
cpe:2.3:o:gl-inet:gl-s10_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl S1300 Firmware
cpe:2.3:o:gl-inet:gl-s1300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl S200 Firmware
cpe:2.3:o:gl-inet:gl-s200_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl S20 Firmware
cpe:2.3:o:gl-inet:gl-s20_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Sf1200 Firmware
cpe:2.3:o:gl-inet:gl-sf1200_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Sft1200 Firmware
cpe:2.3:o:gl-inet:gl-sft1200_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Usb150 Firmware
cpe:2.3:o:gl-inet:gl-usb150_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl X1200 Firmware
cpe:2.3:o:gl-inet:gl-x1200_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl X3000 Firmware
cpe:2.3:o:gl-inet:gl-x3000_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl X300b Firmware
cpe:2.3:o:gl-inet:gl-x300b_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl X750 Firmware
cpe:2.3:o:gl-inet:gl-x750_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Gl Xe300 Firmware
cpe:2.3:o:gl-inet:gl-xe300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
Gl Inet/Microuter N300 Firmware
cpe:2.3:o:gl-inet:microuter-n300_firmware:*:*:*:*:*:*:*:*
Range: <3.216
GL.iNet/devicesdescription
Gl Inet/GL-iNet devicesllm-fuzzy
Range: <3.216

Patches

Vulnerability mechanics

References

github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.mdnvdExploitVendor Advisory
www.gl-inet.comnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.016
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000