CVE-2023-47464

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

22.59% chance of exploitation in the next 30 days, 98th percentile

Published

2023-11-30

Updated

2024-08-02

Proof-of-concept exploits (2)

• gl-inet/CVE-issues/blob/main/4.0.0/Arbitrary%20File%20Creation%20Through%20API%20upload.md
• HadessCS/CVE-2023-474642★ · 2024-02-14

References

• CVE Record
• NVD entry

Related

• CVE-2023-31472
• CVE-2023-31473
• CVE-2023-31475
• CVE-2023-31476
• CVE-2023-31477
• CVE-2023-31478