High severity7.5NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2023-31476

Description

An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters (the working directory is /www).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GL.iNet/devicesdescription
Gl Inet/GL-iNet devicesllm-fuzzy
Range: <3.216
Gl Inet/CVE Issuesllm-fuzzy
Range: <3.216
Gl Inet/Gl Mv1000w Firmware
cpe:2.3:o:gl-inet:gl-mv1000w_firmware:*:*:*:*:*:*:*:*
Range: <=3.215
Gl Inet/Gl Mv1000 Firmware
cpe:2.3:o:gl-inet:gl-mv1000_firmware:*:*:*:*:*:*:*:*
Range: <=3.215

Patches

Vulnerability mechanics

References

github.com/gl-inet/CVE-issues/blob/main/3.215/GL-MV1000_Arbitrary_File_Creation.mdnvdExploitThird Party Advisory
www.gl-inet.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000