critical9.8
CVE-2023-46456
In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.
Impact
In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gl-Inet | Gl-Ar300m Firmware | Version 3.216 |