Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

gl-inet / x3000 CVEs

Beta · best-effort

12 CVEs tagged to gl-inet / x3000 — 4 Critical, 6 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to gl-inet vendor archive

CVE-2024-45263

Published Oct 24, 2024

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to th…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2024-45262

Published Oct 24, 2024

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vu…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2024-45261

Published Oct 24, 2024

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not tied to that user its…

CVSS 8.0 · High

Vendor/product tagsBeta · best-effort

CVE-2024-45260

Published Oct 24, 2024

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface o…

CVSS 8.0 · High

Vendor/product tagsBeta · best-effort

CVE-2024-45259

Published Oct 24, 2024

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-28077

Published Aug 26, 2024

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2024-39229

Published Aug 6, 2024

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.1…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-39227

Published Aug 6, 2024

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39228

Published Aug 6, 2024

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39226

Published Aug 6, 2024

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-39225

Published Aug 6, 2024

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-27356

Published Feb 27, 2024

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-12 of 12 CVEsPage 1 of 1