VULNERABILITY INTELLIGENCE

CVE-2024-45259

CVSS score6.5 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2024-10-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property in the download interface, any file on the device can be deleted.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-326

Primary references