Gl-inet

B1300 Firmware

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8

CVE-2024-45261

Exploit
  • EPSS 0.02%
  • Veröffentlicht 24.10.2024 21:15:12
  • Zuletzt bearbeitet 15.10.2025 17:54:46

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not tied to that user itself, which allows other users to potentially use it for authentication....

8.8

CVE-2024-45262

Exploit
  • EPSS 0.1%
  • Veröffentlicht 24.10.2024 21:15:12
  • Zuletzt bearbeitet 15.10.2025 17:54:36

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to e...

8.8

CVE-2024-45263

  • EPSS 0.06%
  • Veröffentlicht 24.10.2024 21:15:12
  • Zuletzt bearbeitet 29.09.2025 15:02:17

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to informatio...

8

CVE-2024-45260

Exploit
  • EPSS 3.55%
  • Veröffentlicht 24.10.2024 21:15:11
  • Zuletzt bearbeitet 15.10.2025 17:55:07

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it.

6.5

CVE-2024-45259

Exploit
  • EPSS 0.03%
  • Veröffentlicht 24.10.2024 20:15:04
  • Zuletzt bearbeitet 15.10.2025 17:55:27

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property in the download interface, any file on the device can be deleted.

7.5

CVE-2024-28077

  • EPSS 0.17%
  • Veröffentlicht 26.08.2024 20:15:07
  • Zuletzt bearbeitet 14.03.2025 14:15:14

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usern...

5.3

CVE-2024-39229

Exploit
  • EPSS 0.09%
  • Veröffentlicht 06.08.2024 17:15:54
  • Zuletzt bearbeitet 21.11.2024 19:15:09

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB1...

9.8

CVE-2024-39227

Exploit
  • EPSS 1.09%
  • Veröffentlicht 06.08.2024 17:15:53
  • Zuletzt bearbeitet 15.08.2024 16:15:19

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure ...

9.8

CVE-2024-39225

Exploit
  • EPSS 32.46%
  • Veröffentlicht 06.08.2024 16:15:48
  • Zuletzt bearbeitet 15.08.2024 16:15:19

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a remote ...

9.8

CVE-2024-39226

Exploit
  • EPSS 13.64%
  • Veröffentlicht 06.08.2024 16:15:48
  • Zuletzt bearbeitet 12.11.2024 17:35:08

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a vulnera...