CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-31473

An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to read an arbitrary file name while using root privileges. The -f option can be used with a configuration file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 81.0%

CVSS Severity

CVSS v3 Score 4.9

References

Products affected by CVE-2023-31473

Gl-Inet » Gl-A1300 » Version: N/A

cpe:2.3:h:gl-inet:gl-a1300:-
Gl-Inet » Gl-Ap1300 » Version: N/A

cpe:2.3:h:gl-inet:gl-ap1300:-
Gl-Inet » Gl-Ap1300lte » Version: N/A

cpe:2.3:h:gl-inet:gl-ap1300lte:-
Gl-Inet » Gl-Ar300m » Version: N/A

cpe:2.3:h:gl-inet:gl-ar300m:-
Gl-Inet » Gl-Ar750 » Version: N/A

cpe:2.3:h:gl-inet:gl-ar750:-
Gl-Inet » Gl-Ar750s » Version: N/A

cpe:2.3:h:gl-inet:gl-ar750s:-
Gl-Inet » Gl-Ax1800 » Version: N/A

cpe:2.3:h:gl-inet:gl-ax1800:-
Gl-Inet » Gl-Axt1800 » Version: N/A

cpe:2.3:h:gl-inet:gl-axt1800:-
Gl-Inet » Gl-B1300 » Version: N/A

cpe:2.3:h:gl-inet:gl-b1300:-
Gl-Inet » Gl-B2200 » Version: N/A

cpe:2.3:h:gl-inet:gl-b2200:-
Gl-Inet » Gl-E750 » Version: N/A

cpe:2.3:h:gl-inet:gl-e750:-
Gl-Inet » Gl-Mifi » Version: N/A

cpe:2.3:h:gl-inet:gl-mifi:-
Gl-Inet » Gl-Mt1300 » Version: N/A

cpe:2.3:h:gl-inet:gl-mt1300:-
Gl-Inet » Gl-Mt2500 » Version: N/A

cpe:2.3:h:gl-inet:gl-mt2500:-
Gl-Inet » Gl-Mt2500a » Version: N/A

cpe:2.3:h:gl-inet:gl-mt2500a:-
Gl-Inet » Gl-Mt3000 » Version: N/A

cpe:2.3:h:gl-inet:gl-mt3000:-
Gl-Inet » Gl-Mt300n-V2 » Version: N/A

cpe:2.3:h:gl-inet:gl-mt300n-v2:-
Gl-Inet » Gl-Mv1000 » Version: N/A

cpe:2.3:h:gl-inet:gl-mv1000:-
Gl-Inet » Gl-Mv1000w » Version: N/A

cpe:2.3:h:gl-inet:gl-mv1000w:-
Gl-Inet » Gl-S10 » Version: N/A

cpe:2.3:h:gl-inet:gl-s10:-
Gl-Inet » Gl-S1300 » Version: N/A

cpe:2.3:h:gl-inet:gl-s1300:-
Gl-Inet » Gl-S200 » Version: N/A

cpe:2.3:h:gl-inet:gl-s200:-
Gl-Inet » Gl-S20 » Version: N/A

cpe:2.3:h:gl-inet:gl-s20:-
Gl-Inet » Gl-Sf1200 » Version: N/A

cpe:2.3:h:gl-inet:gl-sf1200:-
Gl-Inet » Gl-Sft1200 » Version: N/A

cpe:2.3:h:gl-inet:gl-sft1200:-
Gl-Inet » Gl-Usb150 » Version: N/A

cpe:2.3:h:gl-inet:gl-usb150:-
Gl-Inet » Gl-X1200 » Version: N/A

cpe:2.3:h:gl-inet:gl-x1200:-
Gl-Inet » Gl-X3000 » Version: N/A

cpe:2.3:h:gl-inet:gl-x3000:-
Gl-Inet » Gl-X300b » Version: N/A

cpe:2.3:h:gl-inet:gl-x300b:-
Gl-Inet » Gl-X750 » Version: N/A

cpe:2.3:h:gl-inet:gl-x750:-
Gl-Inet » Gl-Xe300 » Version: N/A

cpe:2.3:h:gl-inet:gl-xe300:-
Gl-Inet » Microuter-N300 » Version: N/A

cpe:2.3:h:gl-inet:microuter-n300:-
Gl-Inet » Gl-A1300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-a1300_firmware:-
Gl-Inet » Gl-Ap1300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-ap1300_firmware:-
Gl-Inet » Gl-Ap1300lte Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-ap1300lte_firmware:-
Gl-Inet » Gl-Ar300m Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-ar300m_firmware:-
Gl-Inet » Gl-Ar300m Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-ar300m_firmware:3.215
Gl-Inet » Gl-Ar750 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-ar750_firmware:-
Gl-Inet » Gl-Ar750 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-ar750_firmware:3.215
Gl-Inet » Gl-Ar750s Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-ar750s_firmware:-
Gl-Inet » Gl-Ar750s Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-ar750s_firmware:3.215
Gl-Inet » Gl-Ax1800 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-ax1800_firmware:-
Gl-Inet » Gl-Ax1800 Firmware » Version: 3.125

cpe:2.3:o:gl-inet:gl-ax1800_firmware:3.125
Gl-Inet » Gl-Ax1800 Firmware » Version: 3.214

cpe:2.3:o:gl-inet:gl-ax1800_firmware:3.214
Gl-Inet » Gl-Ax1800 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-ax1800_firmware:3.215
Gl-Inet » Gl-Axt1800 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-axt1800_firmware:-
Gl-Inet » Gl-Axt1800 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-axt1800_firmware:3.215
Gl-Inet » Gl-B1300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-b1300_firmware:-
Gl-Inet » Gl-B1300 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-b1300_firmware:3.215
Gl-Inet » Gl-B2200 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-b2200_firmware:-
Gl-Inet » Gl-B2200 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-b2200_firmware:3.215
Gl-Inet » Gl-E750 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-e750_firmware:-
Gl-Inet » Gl-E750 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-e750_firmware:3.215
Gl-Inet » Gl-Mifi Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mifi_firmware:-
Gl-Inet » Gl-Mifi Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mifi_firmware:3.215
Gl-Inet » Gl-Mt1300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mt1300_firmware:-
Gl-Inet » Gl-Mt1300 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mt1300_firmware:3.215
Gl-Inet » Gl-Mt2500 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mt2500_firmware:-
Gl-Inet » Gl-Mt2500 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mt2500_firmware:3.215
Gl-Inet » Gl-Mt2500a Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mt2500a_firmware:-
Gl-Inet » Gl-Mt2500a Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mt2500a_firmware:3.215
Gl-Inet » Gl-Mt3000 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mt3000_firmware:-
Gl-Inet » Gl-Mt3000 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mt3000_firmware:3.215
Gl-Inet » Gl-Mt300n-V2 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:-
Gl-Inet » Gl-Mt300n-V2 Firmware » Version: 3.212

cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:3.212
Gl-Inet » Gl-Mt300n-V2 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:3.215
Gl-Inet » Gl-Mv1000 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mv1000_firmware:-
Gl-Inet » Gl-Mv1000 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mv1000_firmware:3.215
Gl-Inet » Gl-Mv1000w Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-mv1000w_firmware:-
Gl-Inet » Gl-Mv1000w Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-mv1000w_firmware:3.215
Gl-Inet » Gl-S10 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-s10_firmware:-
Gl-Inet » Gl-S10 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-s10_firmware:3.215
Gl-Inet » Gl-S1300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-s1300_firmware:-
Gl-Inet » Gl-S1300 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-s1300_firmware:3.215
Gl-Inet » Gl-S200 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-s200_firmware:-
Gl-Inet » Gl-S200 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-s200_firmware:3.215
Gl-Inet » Gl-S20 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-s20_firmware:-
Gl-Inet » Gl-S20 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-s20_firmware:3.215
Gl-Inet » Gl-Sf1200 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-sf1200_firmware:-
Gl-Inet » Gl-Sf1200 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-sf1200_firmware:3.215
Gl-Inet » Gl-Sft1200 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-sft1200_firmware:-
Gl-Inet » Gl-Sft1200 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-sft1200_firmware:3.215
Gl-Inet » Gl-Usb150 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-usb150_firmware:-
Gl-Inet » Gl-Usb150 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-usb150_firmware:3.215
Gl-Inet » Gl-X1200 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-x1200_firmware:-
Gl-Inet » Gl-X1200 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-x1200_firmware:3.215
Gl-Inet » Gl-X3000 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-x3000_firmware:-
Gl-Inet » Gl-X3000 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-x3000_firmware:3.215
Gl-Inet » Gl-X300b Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-x300b_firmware:-
Gl-Inet » Gl-X300b Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-x300b_firmware:3.215
Gl-Inet » Gl-X750 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-x750_firmware:-
Gl-Inet » Gl-X750 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-x750_firmware:3.215
Gl-Inet » Gl-Xe300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:gl-xe300_firmware:-
Gl-Inet » Gl-Xe300 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:gl-xe300_firmware:3.215
Gl-Inet » Microuter-N300 Firmware » Version: N/A

cpe:2.3:o:gl-inet:microuter-n300_firmware:-
Gl-Inet » Microuter-N300 Firmware » Version: 3.215

cpe:2.3:o:gl-inet:microuter-n300_firmware:3.215

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-31473

Products

Pricing

Contact Us