Unrated severityNVD Advisory· Published Oct 24, 2024· Updated Oct 28, 2024

CVE-2024-45263

Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to information leakage, enabling complete control.

Affected products

Gl Inet/GL-iNet devicescpe-rescue
Gl Inet/Gl Mt3000llm-fuzzy
Range: = 4.6.2
Tongyu/AX1800llm-fuzzy
Range: = 4.6.2
Gl Inet/MT6000llm-fuzzy
Range: = 4.6.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/gl-inet/CVE-issues/blob/main/4.0.0/Arbitrary%20File%20Upload%20to%20ovpn_upload%20via%20Upload%20Interface.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000