CVE-2025-25684

A lack of validation in the path parameter /download of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request...

CVE-2025-25684

creationtimestamp| type| source ---|---|--- 2025-03-17 19:08:45+00:00| seen| https://t.me/cvedetector/20493 2025-03-19 20:18:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8147...

CVE-2025-25684

A lack of validation in the path parameter /download of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request...

CVE-2025-25684

The GL-INet Beryl AX GL-MT3000 router (version v4.7.0 ) is vulnerable to a path traversal flaw due to insufficient validation of the path parameter in the /download API endpoint. An attacker can exploit this via a crafted POST request to download arbitrary files from the device's file system. As ...

CVE-2025-25684

A lack of validation in the path parameter /download of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request...

CVE-2025-25684

A lack of validation in the path parameter /download of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request...