CVE-2023-50445

🗓️ 28 Dec 2023 05:15:08Reported by [email protected]Type

CVE-2023-50445 GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7 Shell Injection Vulnerabilit

Reporter	Title	Published	Views	Family All 16
0day.today	GL.iNet Unauthenticated Remote Command Execution Exploit	24 Jan 202400:00	–	zdt
ATTACKERKB	CVE-2023-50445	28 Dec 202305:15	–	attackerkb
BDU FSTEC	The vulnerability of the `get_system_log` and `get_crash_log` functions in the logread module of the GL.iNet router microprogramming solutions (GL.iNet A1300, AX1800, AXT1800, MT3000, MT2500, MT6000, MT1300, MT300N-V2, AR750S, AR750, AR300M, B1300) allows a attacker to execute arbitrary code.	6 Mar 202400:00	–	bdu_fstec
Circl	CVE-2023-50445	28 Dec 202306:26	–	circl
CNNVD	GL.iNet Multiple Products Operating System Command Injection Vulnerability	28 Dec 202300:00	–	cnnvd
CVE	CVE-2023-50445	28 Dec 202300:00	–	cve
Cvelist	CVE-2023-50445	28 Dec 202300:00	–	cvelist
Metasploit	GL.iNet Unauthenticated Remote Command Execution via the logread module.	24 Jan 202419:49	–	metasploit
OSV	CVE-2023-50445	28 Dec 202305:15	–	osv
Packet Storm	GL.iNet Unauthenticated Remote Command Execution	24 Jan 202400:00	–	packetstorm

NVD

Node

gl-inet gl-mt1300_firmwareMatch4.3.7

AND

gl-inet gl-mt1300Match-

Node

gl-inet gl-mt300n-v2_firmwareMatch4.3.7

AND

gl-inet gl-mt300n-v2Match-

Node

gl-inet gl-ar750s_firmwareMatch4.3.7

AND

gl-inet gl-ar750sMatch-

Node

gl-inet gl-ar750_firmwareMatch4.3.7

AND

gl-inet gl-ar750Match-

Node

gl-inet gl-ar300m_firmwareMatch4.3.7

AND

gl-inet gl-ar300mMatch-

Node

gl-inet gl-b1300_firmwareMatch4.3.7

AND

gl-inet gl-b1300Match-

Node

gl-inet gl-mt6000_firmwareMatch4.5.0

AND

gl-inet gl-mt6000Match-

Node

gl-inet gl-a1300_firmwareMatch4.4.6

AND

gl-inet gl-a1300Match-

Node

gl-inet gl-ax1800_firmwareMatch4.4.6

AND

gl-inet gl-ax1800Match-

Node

gl-inet gl-axt1800_firmwareMatch4.4.6

AND

gl-inet gl-axt1800Match-

Node

gl-inet gl-mt3000_firmwareMatch4.4.6

AND

gl-inet gl-mt3000Match-

Node

gl-inet gl-mt2500_firmwareMatch4.4.6

AND

gl-inet gl-mt2500Match-

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html
github	www.github.com/gl-inet/CVE-issues/blob/main/4.0.0/Using%20Shell%20Metacharacter%20Injection%20via%20API.md