Gl-mv1000 Firmware vulnerabilities
4 known vulnerabilities in Gl-mv1000 Firmware from GL.iNet. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Gl-s20 Firmware: Buffer Copy without Checking Size of Input
An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the
- 7.5 High severity
Gl-s20 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path.
- 7.5 High severity
Gl-s20 Firmware: Allocation of Resources Without Limits or Throttling
An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.
- 7.5 High severity
Gl-mv1000w Firmware: Improper Neutralization of Special Elements used in a Command
An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters (the working direc