PT-2025-11519 · Gl.Inet · Gl-Inet Beryl Ax Gl-Mt3000

Published 2025-03-17 · Updated 2025-03-17 · CVE-2025-25684

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GL-INet Beryl AX GL-MT3000 version 4.7.0

Description The issue is related to a lack of validation in the path parameter of the "/download" API endpoint, allowing attackers to download arbitrary files from the device's file system via a crafted POST request.

Recommendations For GL-INet Beryl AX GL-MT3000 version 4.7.0, as a temporary workaround, consider restricting access to the "/download" API endpoint until a patch is available. Avoid using the path parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-25684

Affected Products

Gl-Inet Beryl Ax Gl-Mt3000

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-25684 · Security Note
• https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9 · Note
• https://t.me/cvedetector/20493 · Telegram Post
• https://twitter.com/CVEnew/status/1901679149829214630 · Twitter Post