PT-2019-18065

Name of the Vulnerable Software and Affected Versions GL.iNet GL-AR300M-Lite version 2.27 Description The issue allows remote attackers to download arbitrary files due to the download file in the firmware. Recommendations For version 2.27, update to a newer version that contains a fix for this...

CVE-2019-6274: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in storagecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences...

CVE-2019-6275: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in firmwarecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code...