Path traversal

2023-05-1102:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

gl.inet

file sharing

security issue

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%

JSON

A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path.

CPENameOperatorVersion
gl-a1300_firmwarelt3.216
gl-ap1300_firmwarelt3.216
gl-ap1300lte_firmwarelt3.216
gl-ar300m_firmwarelt3.216
gl-ar750_firmwarelt3.216
gl-ar750s_firmwarelt3.216
gl-ax1800_firmwarelt3.216
gl-axt1800_firmwarelt3.216
gl-b1300_firmwarelt3.216
gl-b2200_firmwarelt3.216

Name	Operator	Version
gl-a1300_firmware	lt	3.216
gl-ap1300_firmware	lt	3.216
gl-ap1300lte_firmware	lt	3.216
gl-ar300m_firmware	lt	3.216
gl-ar750_firmware	lt	3.216
gl-ar750s_firmware	lt	3.216
gl-ax1800_firmware	lt	3.216
gl-axt1800_firmware	lt	3.216
gl-b1300_firmware	lt	3.216
gl-b2200_firmware	lt	3.216