high7.5
CVE-2023-31472
An issue was discovered on GL.iNet devices before 3.216.
Impact
An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gl-Inet | Gl-S20 Firmware | before 3.216 |
| Gl-Inet | Gl-X3000 Firmware | before 3.216 |
| Gl-Inet | Gl-Mt3000 Firmware | before 3.216 |
| Gl-Inet | Gl-Mt2500 Firmware | before 3.216 |
| Gl-Inet | Gl-Mt2500a Firmware | before 3.216 |
| Gl-Inet | Gl-Axt1800 Firmware | before 3.216 |
| Gl-Inet | Gl-A1300 Firmware | before 3.216 |
| Gl-Inet | Gl-Ax1800 Firmware | before 3.216 |
| Gl-Inet | Gl-Sft1200 Firmware | before 3.216 |
| Gl-Inet | Gl-Mt1300 Firmware | before 3.216 |
| Gl-Inet | Gl-E750 Firmware | before 3.216 |
| Gl-Inet | Gl-Mv1000 Firmware | before 3.216 |