Vulnerabilities > GL Inet

DATE CVE VULNERABILITY TITLE RISK
2023-11-29 CVE-2023-47462 Incorrect Default Permissions vulnerability in Gl-Inet Gl-Ax1800 Firmware
Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function.
network
low complexity
gl-inet CWE-276
critical
9.8
2023-06-21 CVE-2023-24261 OS Command Injection vulnerability in Gl-Inet Gl-E750 Firmware
A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request.
network
low complexity
gl-inet CWE-78
7.2
2023-06-13 CVE-2023-33620 Insufficiently Protected Credentials vulnerability in Gl-Inet Gl-Ar750S Firmware 3.215
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack.
network
high complexity
gl-inet CWE-522
5.9
2023-06-13 CVE-2023-33621 Authentication Bypass by Capture-replay vulnerability in Gl-Inet Gl-Ar750S Firmware 3.215
GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded.
network
high complexity
gl-inet CWE-294
5.9
2023-05-11 CVE-2023-31473 Command Injection vulnerability in Gl-Inet products
An issue was discovered on GL.iNet devices before 3.216.
network
low complexity
gl-inet CWE-77
4.9
2023-05-11 CVE-2023-31475 Classic Buffer Overflow vulnerability in Gl-Inet products
An issue was discovered on GL.iNet devices before 3.216.
network
low complexity
gl-inet CWE-120
critical
9.8
2023-05-11 CVE-2023-31477 Path Traversal vulnerability in Gl-Inet products
A path traversal issue was discovered on GL.iNet devices before 3.216.
network
low complexity
gl-inet CWE-22
7.5
2023-05-10 CVE-2023-31471 Unspecified vulnerability in Gl-Inet products
An issue was discovered on GL.iNet devices before 3.216.
network
low complexity
gl-inet
critical
9.8
2023-05-09 CVE-2023-31478 Unspecified vulnerability in Gl-Inet products
An issue was discovered on GL.iNet devices before 3.216.
network
low complexity
gl-inet
7.5
2023-05-09 CVE-2023-31472 Allocation of Resources Without Limits or Throttling vulnerability in Gl-Inet products
An issue was discovered on GL.iNet devices before 3.216.
network
low complexity
gl-inet CWE-770
7.5