CVE-2025-25685

An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share...

CVE-2025-25685

creationtimestamp| type| source ---|---|--- 2025-03-17 18:31:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179199208037720 2025-03-17 19:08:46+00:00| seen| https://t.me/cvedetector/20494 2025-03-21 14:19:15+00:00| published-proof-of-concept|...

CVE-2025-25685

An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share...

CVE-2025-25685

The GL-INet Beryl AX GL-MT3000 router (v4.7.0) is vulnerable to an arbitrary file download issue due to improper limitation of a pathname to a restricted directory. Attackers can exploit this by creating symbolic links on an external drive configured as a Samba share , allowing them to read arbit...