VULNERABILITY INTELLIGENCE

CVE-2024-45263

CVSS score8.8 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2024-10-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to information leakage, enabling complete control.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-434

Primary references