High severity · published Oct 24, 2024
CVE-2024-45262
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to execute scripts under any path.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
A1300 Firmware · Gl-inet
4.5.17 · source: NVD
AF
Ar300m Firmware · Gl-inet
4.3.17 · source: NVD
AF
Ar300m16 Firmware · Gl-inet
4.3.17 · source: NVD
AF
Ar750 Firmware · Gl-inet
4.3.17 · source: NVD
AF
Ar750s Firmware · Gl-inet
4.3.17 · source: NVD
AF
Ax1800 Firmware · Gl-inet
4.6.2 before 4.6.4 · source: NVD
AF
Axt1800 Firmware · Gl-inet
4.6.2 before 4.6.4 · source: NVD
BF
B1300 Firmware · Gl-inet
4.3.17 · source: NVD
BF
B3000 Firmware · Gl-inet
4.5.18 · source: NVD
EF
E750 Firmware · Gl-inet
4.3.17 · source: NVD
MF
Mt1300 Firmware · Gl-inet
4.3.18 · source: NVD
MF
Mt2500 Firmware · Gl-inet
4.6.2 before 4.6.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45262
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45262
Exploit
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Improper%20Pathname%20Restriction%20Leading%20to%20Path%20Traversal%20in%20Restricted%20Directories.md
More from A1300 Firmware
9.8
CVE-2024-39225
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
9.8
CVE-2024-39226
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
9.8
CVE-2024-39228
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
9.8
CVE-2024-39227
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
8.8
CVE-2024-45263
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2