PT-2024-3892 · Gl.Inet · Gl-Inet Ar300M+18

Published 2024-02-26 · Updated 2025-09-18 · CVE-2024-27356

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions: GL-iNet MT6000 version 4.5.5 GL-iNet XE3000 version 4.4.4 GL-iNet X3000 version 4.4.5 GL-iNet MT3000 version 4.5.0 GL-iNet MT2500 version 4.5.0 GL-iNet AXT1800 version 4.5.0 GL-iNet AX1800 version 4.5.0 GL-iNet A1300 version 4.5.0 GL-iNet S200 version 4.1.4-0300 GL-iNet X750 version 4.3.7 GL-iNet SFT1200 version 4.3.7 GL-iNet XE300 version 4.3.7 GL-iNet MT1300 version 4.3.10 GL-iNet AR750 version 4.3.10 GL-iNet AR750S version 4.3.10 GL-iNet AR300M version 4.3.10 GL-iNet AR300M16 version 4.3.10 GL-iNet B1300 version 4.3.10 GL-iNet MT300N-v2 version 4.3.10 GL-iNet X300B version 3.217 GL-iNet S1300 version 3.216 GL-iNet SF1200 version 3.216 GL-iNet MV1000 version 3.216 GL-iNet N300 version 3.216 GL-iNet B2200 version 3.216 GL-iNet X1200 version 3.203

Description: An issue was discovered on certain GL-iNet devices, where attackers can download files such as logs via commands, potentially obtaining critical user information. The vulnerability is related to the use of an insecure path in the process of exporting logs, which may allow a remote attacker to gain unauthorized access to protected information and download arbitrary files.

Recommendations: For GL-iNet MT6000 version 4.5.5, update to a newer version that contains a fix for this issue. For GL-iNet XE3000 version 4.4.4, update to a newer version that contains a fix for this issue. For GL-iNet X3000 version 4.4.5, update to a newer version that contains a fix for this issue. For GL-iNet MT3000 version 4.5.0, update to a newer version that contains a fix for this issue. For GL-iNet MT2500 version 4.5.0, update to a newer version that contains a fix for this issue. For GL-iNet AXT1800 version 4.5.0, update to a newer version that contains a fix for this issue. For GL-iNet AX1800 version 4.5.0, update to a newer version that contains a fix for this issue. For GL-iNet A1300 version 4.5.0, update to a newer version that contains a fix for this issue. For GL-iNet S200 version 4.1.4-0300, update to a newer version that contains a fix for this issue. For GL-iNet X750 version 4.3.7, update to a newer version that contains a fix for this issue. For GL-iNet SFT1200 version 4.3.7, update to a newer version that contains a fix for this issue. For GL-iNet XE300 version 4.3.7, update to a newer version that contains a fix for this issue. For GL-iNet MT1300 version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet AR750 version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet AR750S version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet AR300M version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet AR300M16 version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet B1300 version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet MT300N-v2 version 4.3.10, update to a newer version that contains a fix for this issue. For GL-iNet X300B version 3.217, update to a newer version that contains a fix for this issue. For GL-iNet S1300 version 3.216, update to a newer version that contains a fix for this issue. For GL-iNet SF1200 version 3.216, update to a newer version that contains a fix for this issue. For GL-iNet MV1000 version 3.216, update to a newer version that contains a fix for this issue. For GL-iNet N300 version 3.216, update to a newer version that contains a fix for this issue. For GL-iNet B2200 version 3.216, update to a newer version that contains a fix for this issue. For GL-iNet X1200 version 3.203, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the log export functionality until a patch is available.

Exploit

Fix

Untrusted Search Path

Information Disclosure

Uncontrolled Search Path Element

Weakness Enumeration

CWE-426

CWE-200

CWE-427

Related Identifiers

BDU:2024-04298

CVE-2024-27356

Affected Products

Gl-Inet A1300

Gl-Inet Ar300M

Gl-Inet Ar300M16

Gl-Inet Ar750

Gl-Inet Ax1800

Gl-Inet B2200

Gl-Inet Mt1300

Gl-Inet Mt2500

Gl-Inet Mt3000

Gl-Inet Mt300N-V2

Gl-Inet Mt6000

Gl-Inet Mv1000

Gl-Inet N300

Gl-Inet S200

Gl-Inet Sft1200

Gl-Inet X1200

Gl-Inet X3000

Gl-Inet Xe300

Gl-Inet X750

References · 14

• 🔥 https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md · Exploit
• 🔥 https://exploit-db.com/exploits/51942 · Exploit
• https://bdu.fstec.ru/vul/2024-04298 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27356 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27356 · Vendor Advisory
• https://twitter.com/ExCraft_labs/status/1852327650246709722 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1762364646743277572 · Twitter Post
• https://t.me/cvenotify/115926 · Telegram Post
• https://gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-apr-29-2024 · Note
• https://packetstormsecurity.com/files/177886/GL-iNet-MT6000-4.5.5-Arbitrary-File-Download.html · Note
• https://t.me/cybersecuritytechnologies/10267 · Telegram Post
• https://gl-inet.com · Note
• https://t.me/cvenotify/72392 · Telegram Post
• https://t.me/cveNotify/135821 · Telegram Post