CVE-2024-27356

🗓️ 27 Feb 2024 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 3632 Views

An issue on GL-iNet devices allows attackers to download files, potentially obtaining critical user information. Affects various MT6000, XE3000, X3000, and other models

Reporter	Title	Published	Views	Family All 13
0day.today	GL.iNet MT6000 4.5.5 - Arbitrary File Download Exploit	2 Apr 202400:00	–	zdt
BDU FSTEC	The vulnerability of the administrator panel of GL.iNet microprogramming software allows a intruder to gain unauthorized access to protected information and upload arbitrary files.	3 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-27356	27 Feb 202402:21	–	circl
CNNVD	Various GL.iNet products Security Breach	27 Feb 202400:00	–	cnnvd
Cvelist	CVE-2024-27356	27 Feb 202400:00	–	cvelist
Exploit DB	GL-iNet MT6000 4.5.5 - Arbitrary File Download	2 Apr 202400:00	–	exploitdb
EUVD	EUVD-2024-24560	27 Feb 202400:00	–	euvd
NVD	CVE-2024-27356	27 Feb 202401:15	–	nvd
OSV	CVE-2024-27356	27 Feb 202401:15	–	osv
Packet Storm	GL-iNet MT6000 4.5.5 Arbitrary File Download	2 Apr 202400:00	–	packetstorm

NVD

Vulnrichment

Node

AND

gl-inet mt6000_firmwareMatch4.5.5

gl-inet mt6000Match-

Node

AND

gl-inet xe3000_firmwareMatch4.4.4

gl-inet xe3000Match-

Node

AND

gl-inet x3000_firmwareMatch4.4.5

gl-inet x3000Match-

Node

AND

gl-inet mt3000_firmwareMatch4.5.0

gl-inet mt3000Match-

Node

AND

gl-inet mt2500_firmwareMatch4.5.0

gl-inet mt2500Match-

Node

AND

gl-inet axt1800_firmwareMatch4.5.0

gl-inet axt1800Match-

Node

AND

gl-inet ax1800_firmwareMatch4.5.0

gl-inet ax1800Match-

Node

AND

gl-inet a1300_firmwareMatch4.5.0

gl-inet a1300Match-

Node

AND

gl-inet s200_firmwareMatch4.1.4-0300

gl-inet s200Match-

Node

AND

gl-inet x750_firmwareMatch4.3.7

gl-inet x750Match-

Node

AND

gl-inet sft1200_firmwareMatch4.37

gl-inet sft1200Match-

Node

AND

gl-inet xe300_firmwareMatch4.3.7

gl-inet xe300Match-

Node

AND

gl-inet mt1300_firmwareMatch4.3.10

gl-inet mt1300Match-

Node

AND

gl-inet ar750_firmwareMatch4.3.10

gl-inet ar750Match-

Node

AND

gl-inet ar750s_firmwareMatch4.3.10

gl-inet ar750sMatch-

Node

AND

gl-inet ar300m_firmwareMatch4.3.10

gl-inet ar300mMatch-

Node

AND

gl-inet ar300m16_firmwareMatch4.3.10

gl-inet ar300m16Match-

Node

AND

gl-inet b1300_firmwareMatch4.3.10

gl-inet b1300Match-

Node

AND

gl-inet mt300n-v2_firmwareMatch4.3.10

gl-inet mt300n-v2Match-

Node

AND

gl-inet x300b_firmwareMatch3.217

gl-inet x300bMatch-

Node

AND

gl-inet s1300_firmwareMatch3.216

gl-inet s1300Match-

Node

AND

gl-inet sf1200_firmwareMatch3.216

gl-inet sf1200Match-

Node

AND

gl-inet mv1000_firmwareMatch3.216

gl-inet mv1000Match-

Node

AND

gl-inet n300_firmwareMatch3.216

gl-inet n300Match-

Node

AND

gl-inet b2200_firmwareMatch3.216

gl-inet b2200Match-

Node

AND

gl-inet x1200_firmwareMatch3.203

gl-inet x1200Match-

Source	Link
gl-inet	www.gl-inet.com/
github	www.github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md

17 Jun 2026 07:19Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.23905

SSVC

gl-inet cve-2024-27356 security vulnerability file download user information nvd mt6000 xe3000 x3000