NetSight
IP …
high7.8

CVE-2023-50445

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7…

Impact

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local attackers to execute arbitrary code via the get_system_log and get_crash_log functions of the logread module, as well as the upgrade_online function of the upgrade module.

Affected products

VendorProductAffected versions
Gl-InetGl-Mt1300 Firmware
Version 4.3.7
Gl-InetGl-Mt300n-V2 Firmware
Version 4.3.7
Gl-InetGl-Ar750s Firmware
Version 4.3.7
Gl-InetGl-Ar750 Firmware
Version 4.3.7
Gl-InetGl-Ar300m Firmware
Version 4.3.7
Gl-InetGl-B1300 Firmware
Version 4.3.7
Gl-InetGl-Mt6000 Firmware
Version 4.5.0
Gl-InetGl-A1300 Firmware
Version 4.4.6
Gl-InetGl-Ax1800 Firmware
Version 4.4.6
Gl-InetGl-Axt1800 Firmware
Version 4.4.6
Gl-InetGl-Mt3000 Firmware
Version 4.4.6
Gl-InetGl-Mt2500 Firmware
Version 4.4.6

Weakness classification

CWE-78CWE-77

References