Medium severity6.5NVD Advisory· Published Oct 24, 2024· Updated Jun 17, 2026

CVE-2024-45259

Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property in the download interface, any file on the device can be deleted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gl Inet/GL-iNet devicescpe-rescue
Gl Inet/MT2500llm-create
Range: <=4.6.2
Gl Inet/Gl Mt3000llm-fuzzy
Range: <=4.6.2
Gl Inet/MT6000llm-fuzzy
Range: <=4.6.2

Patches

Vulnerability mechanics

References

github.com/gl-inet/CVE-issues/blob/main/4.0.0/Delete%20Any%20File%20via%20Download%20Interface.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000