CVE-2025-25685

An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share...

CVE-2025-25685

creationtimestamp| type| source ---|---|--- 2025-03-17 18:31:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179199208037720 2025-03-17 19:08:46+00:00| seen| https://t.me/cvedetector/20494 2025-03-21 14:19:15+00:00| published-proof-of-concept|...

CVE-2025-25685

An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download arbitrary files from the device's file system via adding symbolic links on an external drive used as a samba share...

CVE-2025-25685

The GL.iNet Beryl AX GL-MT3000 router (version v4.7.0 ) is vulnerable to an arbitrary file read issue within its File Sharing function on the administrator web panel. The root cause is incorrect restrictions on path names to the restricted directory, which allows an attacker to exploit the SMB pr...