CVE-2023-50922

An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontab-formatted file to a specific directory and waiting for its execution. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000...

CVE-2023-50922

CVE-2023-50922 affects GL.iNet devices through version 4.5.0. An attacker who can steal the AdminToken cookie can achieve remote code execution by uploading a crontab-formatted file to a specific directory and waiting for it to run. Affected models/versions include A1300 4.4.6, AX1800 4.4.6, AXT1...

CVE-2023-50922

An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontab-formatted file to a specific directory and waiting for its execution. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000...