An issue discovered on GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2, allows arbitrary directory traversal via the params parameter
Reporter | Title | Published | Views | Family All 3 |
---|---|---|---|---|
CVE | CVE-2024-45262 | 24 Oct 202421:15 | – | cve |
NVD | CVE-2024-45262 | 24 Oct 202421:15 | – | nvd |
Cvelist | CVE-2024-45262 | 24 Oct 202400:00 | – | cvelist |
[
{
"cpes": [
"cpe:2.3:o:gl-inet:gl-b3000_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "gl-inet",
"product": "gl-b3000_firmware",
"versions": [
{
"status": "affected",
"version": "4.5.18",
"lessThan": "4.5.19",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:gl-inet:gl-ax1800_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-axt1800_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-mt2500_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-mt3000_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-mt6000_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "gl-inet",
"product": "gl-mt6000_firmware",
"versions": [
{
"status": "affected",
"version": "4.6.2",
"lessThan": "4.6.4",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:gl-inet:gl-a1300_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-x300b_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "gl-inet",
"product": "gl-x300b_firmware",
"versions": [
{
"status": "affected",
"version": "4.5.17",
"lessThan": "4.5.18",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:gl-inet:gl-x3000_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-xe300_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "gl-inet",
"product": "gl-xe300_firmware",
"versions": [
{
"status": "affected",
"version": "4.4.9",
"lessThan": "4.4.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:gl-inet:gl-mt1300_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-sft1200_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-x750_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "gl-inet",
"product": "gl-x750_firmware",
"versions": [
{
"status": "affected",
"version": "4.3.18",
"lessThan": "4.3.19",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:gl-inet:gl-ar300m16_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-ar750_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-ar300m_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-ar750s_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-b1300_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-e750_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:gl-inet:gl-xe300_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "gl-inet",
"product": "gl-xe300_firmware",
"versions": [
{
"status": "affected",
"version": "4.3.17",
"lessThan": "4.3.18",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo