Mv1000 Firmware vulnerabilities

5 known vulnerabilities in Mv1000 Firmware from GL.iNet. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  gl-mt2500: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2024-39227Aug 6, 2024GL.iNetEPSS 1.19%

  GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure permission

• 9.8 Critical severity

  x750_firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-39228Aug 6, 2024GL.iNet

  GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a shell injection v

• 9.8 Critical severity

  Mt6000 Firmware: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-39226Aug 6, 2024GL.iNetEPSS 20.4%

  GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a vulnerability can

• 9.8 Critical severity

  mt6000_firmware: Improper Restriction of Excessive Authentication Attempts

  CVE-2024-39225Aug 6, 2024GL.iNetEPSS 14.4%

  GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a remote code execu

• 7.5 High severity

  mt1300: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-27356Feb 27, 2024GL.iNetEPSS 23.9%

  An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800