CVE-2024-27356
HIGH 7.5EPSS 23.9%
An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.
- CVSS v3.1
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 23.91% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2024-02-27
- Updated
- 2025-03-24
Proof-of-concept exploits (3)
- aggressor0/GL.iNet-Exploits1★ · 2024-10-29
- aggressor0/GL.iNet-RCE1★ · 2024-10-29
- aggressor0/GL.iNet-Vulnerabilities1★ · 2024-10-29