VULNERABILITY INTELLIGENCE
CVE-2024-45260
CVSS score8 HIGH
EPSS probability4.10%
CISA KEVNot currently listed
Published2024-10-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-863
Primary references
- cve@mitre.org — Exploit, Third Party Advisory