CVE-2024-39229

🗓️ 06 Aug 2024 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 42 Views

An issue in GL-iNet products allows man-in-the-middle attack on DDNS client

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-39229	6 Aug 202420:02	–	circl
CNNVD	GL.iNet多款产品安全漏洞	6 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-39229	6 Aug 202400:00	–	cvelist
NVD	CVE-2024-39229	6 Aug 202417:15	–	nvd
OSV	CVE-2024-39229	6 Aug 202417:15	–	osv
RedhatCVE	CVE-2024-39229	9 Jan 202609:33	–	redhatcve
Vulnrichment	CVE-2024-39229	6 Aug 202400:00	–	vulnrichment

NVD

Node

gl-inet mt6000_firmwareMatch4.5.8

AND

gl-inet mt6000Match-

Node

gl-inet a1300_firmwareMatch4.5.16

AND

gl-inet a1300Match-

Node

gl-inet x300b_firmwareMatch4.5.16

AND

gl-inet x300bMatch-

Node

gl-inet ax1800_firmwareMatch4.5.16

AND

gl-inet ax1800Match-

Node

gl-inet axt1800_firmwareMatch4.5.16

AND

gl-inet axt1800Match-

Node

gl-inet mt2500_firmwareMatch4.5.16

AND

gl-inet mt2500Match-

Node

gl-inet mt3000_firmwareMatch4.5.16

AND

gl-inet mt3000Match-

Node

gl-inet x3000_firmwareMatch4.4.8

AND

gl-inet x3000Match-

Node

gl-inet xe3000_firmwareMatch4.4.8

AND

gl-inet xe3000Match-

Node

gl-inet xe300_firmwareMatch4.3.16

AND

gl-inet xe300Match-

Node

gl-inet e750_firmwareMatch4.3.12

AND

gl-inet e750Match-

Node

gl-inet x750_firmwareMatch4.3.11

AND

gl-inet x750Match-

Node

gl-inet sft1200_firmwareMatch4.3.11

AND

gl-inet sft1200Match-

Node

gl-inet ar300m_firmwareMatch4.3.11

AND

gl-inet ar300mMatch-

Node

gl-inet ar300m16_firmwareMatch4.3.11

AND

gl-inet ar300m16Match-

Node

gl-inet ar750_firmwareMatch4.3.11

AND

gl-inet ar750Match-

Node

gl-inet ar750s_firmwareMatch4.3.11

AND

gl-inet ar750sMatch-

Node

gl-inet b1300_firmwareMatch4.3.11

AND

gl-inet b1300Match-

Node

gl-inet mt1300_firmwareMatch4.3.11

AND

gl-inet mt1300Match-

Node

gl-inet mt300n-v2_firmwareMatch4.3.11

AND

gl-inet mt300n-v2Match-

Node

gl-inet ap1300_firmwareMatch3.217

AND

gl-inet ap1300Match-

Node

gl-inet b2200_firmwareMatch3.216

AND

gl-inet b2200Match-

Node

gl-inet mv1000_firmwareMatch3.216

AND

gl-inet mv1000Match-

Node

gl-inet mv1000w_firmwareMatch3.216

AND

gl-inet mv1000wMatch-

Node

gl-inet usb150_firmwareMatch3.216

AND

gl-inet usb150Match-

Node

gl-inet sf1200_firmwareMatch3.216

AND

gl-inet sf1200Match-

Node

gl-inet n300_firmwareMatch3.216

AND

gl-inet n300Match-

Node

gl-inet s1300_firmwareMatch3.216

AND

gl-inet s1300Match-

Source	Link
github	www.github.com/gl-inet/CVE-issues/blob/main/4.0.0/DDNS%20data%20is%20not%20encrypted.md

21 Nov 2024 19:15Current

7High risk

Vulners AI Score7

CVSS 3.15.3 - 6.5

EPSS0.00092

SSVC

gl-inet man-in-the-middle attack ddns clients