Unrated severityNVD Advisory· Published Oct 24, 2024· Updated Oct 28, 2024

CVE-2024-45260

Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it.

Affected products

Gl Inet/GL-iNet devicescpe-rescue
Gl Inet/MT6000llm-create
Range: = 4.6.2
Tongyu/AX1800llm-fuzzy
Range: = 4.6.2
Gl Inet/GL-AXT1800llm-fuzzy
Range: = 4.6.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/gl-inet/CVE-issues/blob/main/4.0.0/Unauthorized%20Access%20to%20File%20Download%20and%20Upload%20Interfaces.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000