PT-2023-30460 · Gl.Inet · Gl-Inet Ax1800

CVE-2023-47463 · Publicado 2023-11-30 · Atualizado 2024-10-16

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GL.iNet AX1800 versions 4.0.0 through 4.4.x

Description The issue allows a remote attacker to execute arbitrary code via a crafted script to the gl nas sys authentication function. This enables the attacker to potentially gain unauthorized access and control over the system.

Recommendations For GL.iNet AX1800 versions 4.0.0 through 4.4.x, update to version 4.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the gl nas sys authentication function until a patch is available.

Exploit

Correção

Improper Preservation of Permissions

Enumeração de Fraquezas

CWE-281

Identificadores relacionados

CVE-2023-47463

Produtos afetados

Gl-Inet Ax1800

Referências · 6

• 🔥 https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/an%20unauthenticated%20remote%20code%20execution.md · Exploit
• https://t.me/cvenotify/62353 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-47463 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-47463 · Aviso do Fabricante
• https://t.me/cvenotify/61660 · Publicação no Telegram
• https://t.me/cvenotify/98371 · Publicação no Telegram