GL-MT3000 vulnerabilities
19 known vulnerabilities in GL-MT3000 from GL.iNet. 19 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initia
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function set_upgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. Th
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function remove_profile of the file /cgi-bin/glc of the component modem.so. This manipulation causes command injection. It is possible to initiate the attack remotely. The
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The manipulation of the argument public_key leads to command injection.
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of the component wg-server.so Native Plugin. Executing a manipulation of the argument private_key can le
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file /cgi-bin/glc of the component s2s.so Native Plugin. Performing a manipulation of the argument port results in command injection. The attack
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. T
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi-bin/glc of the component plugins.so Native Plugin. This manipulation causes command injection. The a
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Executing a manipulation of the argument Hostname can lead to com
- 9.8 Critical severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Performing a manipulation of the argument filename results in command injecti
- 8.8 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switch_info/network.switch_status of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch le
- 8.0 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument record_size causes command inj
- 8.8 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in co
- 8.8 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/one_click_upgrade of the component Online Firmware Upgrade Handler. Such manipulation leads to command
- 8.8 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack
- 7.3 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function FUN_0042e200 of the file /cgi-bin/glc of the component SET_USER_PWD Handler. The manipulation of the argument Password leads to command injection. The attack can be initi
- 7.3 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the argument media_dir can lead to command injection. It is possible to launch the
- 7.3 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument dev_name results in command injection. It is
- 9.8 Critical severity
gl-mt2500: Improper Neutralization of Special Elements in Output Used by a Downstream Component
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure permission