İçeriğe atla
Noroxi

GL-iNet kayıtları

gl-inet üreticisine ait 57 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %3,5
Pre-auth RCE
13
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

57 kayıt
  • CVE-2023-50919
    53Planlayın

    An issue was discovered on GL.iNet devices before version 4.5.0.

    KritikCVSS 9,8SilahlaştırılmışEPSS %48

    gl-inet · gl-ax1800 firmware12 Oca 2024

  • CVE-2023-46456
    46Planlayın

    In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload fu

    KritikCVSS 9,8İstismar yokEPSS %25

    gl-inet · gl-ar300m firmware12 Ara 2023

  • CVE-2023-46454
    46Planlayın

    In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the p

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    gl-inet · gl-ar300m firmware12 Ara 2023

  • CVE-2024-39226
    45Planlayın

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    KritikCVSS 9,8İstismar yokEPSS %20

    gl-inet · mt6000 firmware6 Ağu 2024

  • CVE-2023-46455
    44Planlayın

    In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN cli

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    gl-inet · gl-ar300m firmware12 Ara 2023

  • CVE-2023-29778
    44Planlayın

    GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

    KritikCVSS 9,8İstismar yokEPSS %16

    gl-inet · gl-mt3000 firmware2 May 2023

  • CVE-2024-39225
    43Planlayın

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    KritikCVSS 9,8İstismar yokEPSS %14

    gl-inet · mt6000 firmware6 Ağu 2024

  • CVE-2023-31475
    43Planlayın

    An issue was discovered on GL.iNet devices before 3.216.

    KritikCVSS 9,8İstismar yokEPSS %14

    gl-inet · gl-s20 firmware11 May 2023

  • CVE-2023-47464
    42Planlayın

    Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the u

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    gl-inet · gl-ax1800 firmware30 Kas 2023

  • CVE-2026-26792
    40Planlayın

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_u

    KritikCVSS 9,8İstismar yokEPSS %4

    gl-inet · ar300m16 firmware12 Mar 2026

  • CVE-2026-26793
    40Planlayın

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.

    KritikCVSS 9,8İstismar yokEPSS %4

    gl-inet · ar300m16 firmware12 Mar 2026

  • CVE-2026-26795
    40Planlayın

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log fun

    KritikCVSS 9,8İstismar yokEPSS %4

    gl-inet · ar300m16 firmware12 Mar 2026

  • CVE-2026-26791
    40Planlayın

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_ser

    KritikCVSS 9,8İstismar yokEPSS %4

    gl-inet · ar300m16 firmware12 Mar 2026

  • CVE-2023-31478
    39İzleyin

    An issue was discovered on GL.iNet devices before 3.216.

    YüksekCVSS 7,5Kavram kanıtıEPSS %30

    gl-inet · gl-s20 firmware9 May 2023

  • CVE-2019-6272
    39İzleyin

    Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitra

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2019-6275
    39İzleyin

    Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbi

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2023-47462
    39İzleyin

    Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file shar

    KritikCVSS 9,8İstismar yokEPSS %1

    gl-inet · gl-ax1800 firmware29 Kas 2023

  • CVE-2023-47463
    39İzleyin

    Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a cra

    KritikCVSS 9,8İstismar yokEPSS %1

    gl-inet · gl-ax1800 firmware30 Kas 2023

  • CVE-2024-39227
    39İzleyin

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    KritikCVSS 9,8İstismar yokEPSS %1

    gl-inet · mt6000 firmware6 Ağu 2024

  • CVE-2023-31471
    39İzleyin

    An issue was discovered on GL.iNet devices before 3.216.

    KritikCVSS 9,8İstismar yokEPSS %1

    gl-inet · gl-s20 firmware10 May 2023

  • CVE-2024-39228
    39İzleyin

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    KritikCVSS 9,8İstismar yokEPSS %1

    gl-inet · mt6000 firmware6 Ağu 2024

  • CVE-2023-50921
    39İzleyin

    An issue was discovered on GL.iNet devices through 4.5.0.

    KritikCVSS 9,8İstismar yokEPSS %1

    gl-inet · gl-mt1300 firmware3 Oca 2024

  • CVE-2019-6274
    38İzleyin

    Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspec

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2024-27356
    37İzleyin

    An issue was discovered on certain GL-iNet devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    gl-inet · mt6000 firmware26 Şub 2024

  • CVE-2026-32292
    37İzleyin

    GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting

    KritikCVSS 9,3İstismar yokEPSS %1

    gl-inet · comet gl-rm1 firmware17 Mar 2026