CVE-2025-25685

An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share...

CVE-2025-25685

creationtimestamp| type| source ---|---|--- 2025-03-17 18:31:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179199208037720 2025-03-17 19:08:46+00:00| seen| https://t.me/cvedetector/20494 2025-03-21 14:19:15+00:00| published-proof-of-concept|...

CVE-2025-25685

An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share...

CVE-2025-25685

CVE-2025-25685 affects GL.iNet Beryl AX GL-MT3000 (v4.7.0). The issue allows attackers to download arbitrary files from the device’s filesystem by adding symbolic links on an external drive that is exposed as a Samba share. Root cause described is related to the handling of symbolic links on the ...