PT-2024-14010 · Gl.Inet · Gl.Inet

Published 2024-01-03 · Updated 2024-01-10 · CVE-2023-50922

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GL.iNet devices versions 4.3.7 through 4.5.0

Description An issue was discovered on GL.iNet devices. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontab-formatted file to a specific directory and waiting for its execution. This affects various GL.iNet device models.

Recommendations For versions 4.3.7 through 4.5.0, as a temporary workaround, consider restricting access to the directory where crontab-formatted files are uploaded until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-50922

Affected Products

Gl.Inet

References · 7

• 🔥 https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Remote%20code%20execution%20due%20to%20gl_crontabs.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-50922 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50922 · Security Note
• https://t.me/cibsecurity/74284 · Telegram Post
• https://t.me/cvenotify/66899 · Telegram Post
• https://twitter.com/CVEnew/status/1742453917181731170 · Twitter Post
• https://t.me/cvenotify/66032 · Telegram Post