CVE-2024-45262

🗓️ 24 Oct 2024 00:00:00Reported by mitreType

An issue discovered in certain GL-iNet devices allows arbitrary directory traversal via params parameter in the /rpc endpoin

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-45262	25 Oct 202400:21	–	circl
CNNVD	GL.iNet多款产品安全漏洞	24 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-45262	24 Oct 202400:00	–	cvelist
NVD	CVE-2024-45262	24 Oct 202421:15	–	nvd
OSV	CVE-2024-45262	24 Oct 202421:15	–	osv
Positive Technologies	PT-2024-31519 · Gl.Inet · Gl-Inet Mt6000 +3	24 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-45262	23 May 202506:15	–	redhatcve
Vulnrichment	CVE-2024-45262	24 Oct 202400:00	–	vulnrichment

NVD

Vulnrichment

Node

gl-inet mt2500_firmwareRange4.6.2–4.6.4

AND

gl-inet mt2500Match-

Node

gl-inet axt1800_firmwareRange4.6.2–4.6.4

AND

gl-inet axt1800Match-

Node

gl-inet ax1800_firmwareRange4.6.2–4.6.4

AND

gl-inet ax1800Match-

Node

gl-inet b3000_firmwareMatch4.5.18

AND

gl-inet b3000Match-

Node

gl-inet a1300_firmwareMatch4.5.17

AND

gl-inet a1300Match-

Node

gl-inet x300b_firmwareMatch4.5.17

AND

gl-inet x300bMatch-

Node

gl-inet x3000_firmwareMatch4.4.9

AND

gl-inet x3000Match-

Node

gl-inet xe3000_firmwareMatch4.4.9

AND

gl-inet xe3000Match-

Node

gl-inet x750_firmwareMatch4.3.18

AND

gl-inet x750Match-

Node

gl-inet sft1200_firmwareMatch4.3.18

AND

gl-inet sft1200Match-

Node

gl-inet mt1300_firmwareMatch4.3.18

AND

gl-inet mt1300Match-

Node

gl-inet e750_firmwareMatch4.3.17

AND

gl-inet e750Match-

Node

gl-inet xe300_firmwareMatch4.3.17

AND

gl-inet xe300Match-

Node

gl-inet ar750_firmwareMatch4.3.17

AND

gl-inet ar750Match-

Node

gl-inet ar750s_firmwareMatch4.3.17

AND

gl-inet ar750sMatch-

Node

gl-inet ar300m_firmwareMatch4.3.17

AND

gl-inet ar300mMatch-

Node

gl-inet mt300n-v2_firmwareMatch4.3.17

AND

gl-inet mt300n-v2Match-

Node

gl-inet mt6000_firmwareMatch4.6.2

AND

gl-inet mt6000Match-

Node

gl-inet b1300_firmwareMatch4.3.17

AND

gl-inet b1300Match-

Node

gl-inet mt3000_firmwareMatch4.6.2

AND

gl-inet gl-mt3000Match-

Node

gl-inet ar300m16_firmwareMatch4.3.17

AND

gl-inet ar300m16Match-

Source	Link
github	www.github.com/gl-inet/CVE-issues/blob/main/4.0.0/Improper%20Pathname%20Restriction%20Leading%20to%20Path%20Traversal%20in%20Restricted%20Directories.md

17 Jun 2026 07:53Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.8

EPSS0.00647

SSVC

CWE-22