GL.iNet-Multiple-Vulnerabilities

GL.iNet एकाधिक कमजोरियाँ इस रिपॉजिटरी में निम्नलिखित कमजोरियों के शोषण शामिल हैं: CVE-2023-46454: GL.iNET GL-AR300M राउटरों में फर्मवेयर v4.3.7 के साथ, पैकेज जानकारी कार्यक्षमता में एक क्राफ्टेड पैकेज नाम के माध्यम से मनमाने शेल कमांड इंजेक्ट करना संभव है। CVE-2023-46455: GL.iNET GL-AR300M राउटरो...

CVE-2023-46454

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2023-46456: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality...

CVE-2023-46454: Improper Neutralization of Special Elements used in an OS Command

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

PT-2019-18065

Name of the Vulnerable Software and Affected Versions GL.iNet GL-AR300M-Lite version 2.27 Description The issue allows remote attackers to download arbitrary files due to the download file in the firmware. Recommendations For version 2.27, update to a newer version that contains a fix for this...

CVE-2019-6275: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in firmwarecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code...

PT-2019-18064

Name of the Vulnerable Software and Affected Versions GL.iNet GL-AR300M-Lite version 2.27 Description A command injection issue in the login cgi of GL.iNet GL-AR300M-Lite devices allows remote attackers to execute arbitrary code. Recommendations For version 2.27, update the firmware to a version...

PT-2019-18067

Name of the Vulnerable Software and Affected Versions GL.iNet GL-AR300M-Lite version 2.27 Description A command injection issue in the firmware cgi of GL.iNet GL-AR300M-Lite devices allows remote attackers to execute arbitrary code. Recommendations For version 2.27, at the moment, there is no...

PT-2019-18066

Name of the Vulnerable Software and Affected Versions GL.iNet GL-AR300M-Lite version 2.27 Description A directory traversal issue in the storage cgi of GL.iNet GL-AR300M-Lite devices allows remote attackers to have an unspecified impact via directory traversal sequences. Recommendations For versi...

CVE-2019-6274: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in storagecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences...