CVE-2024-27356

CVE-2024-27356 affects GL.iNet devices (examples include MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, and others listed). The issue allows an attacker to trigger commands that download files (e.g., logread.tar) from the device, potentially exposing critical user informatio...

CVE-2024-39226

CVE-2024-39226 affects a broad set of GL.iNet routers (AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750, MT3000/MT2500/AXT1800/AX1800/A1300/X300B, XE300/E750/AP1300/S1300, XE3000/X3000) with firmware versions ranging from 4.3.11 to 4.4. The vulnerability allows manipulating router...

CVE-2024-39229

GL.iNet device family including AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.x, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.x, XE300, E750, AP1300/S1300, XE3000/X3000, B2200/MV1000/MV1000W/USB150/N300/SF1200 (and related variants) are documented as having a vulnerability ...

CVE-2024-39225

The CVE-2024-39225 entry concerns a remote code execution (RCE) vulnerability reported in GL.iNet products. Affected devices include AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S130...

CVE-2024-39228

GL.iNet firmware for multiple models (AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11; MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16; XE300 v4.3.16; E750 v4.3.12; AP1300/S1300 v4.3.13; XE3000/X3000 v4.4) contains a shell injection vulnerability via the interfaces check...

CVE-2024-39227

CVE-2024-39227 affects GL.iNet routers (AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11; MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16; XE300 v4.3.16; E750 v4.3.12; AP1300/S1300 v4.3.13; XE3000/X3000 v4.4). An insecure permission issue in endpoint /cgi-bin/glc allows u...