Unrated severityNVD Advisory· Published Oct 24, 2024· Updated Oct 28, 2024

CVE-2024-45259

Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property in the download interface, any file on the device can be deleted.

Affected products

Gl Inet/GL-iNet devicescpe-rescue
Gl Inet/Gl Mt3000llm-fuzzy
Range: = 4.6.2
Tongyu/AX1800llm-fuzzy
Range: = 4.6.2
Gl Inet/MT6000llm-fuzzy
Range: = 4.6.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/gl-inet/CVE-issues/blob/main/4.0.0/Delete%20Any%20File%20via%20Download%20Interface.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000