PT-2025-11520 · Gl.Inet · Gl-Inet Beryl Ax Gl-Mt3000

Published 2025-01-18 · Updated 2025-03-21 · CVE-2025-25685

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions GL-INet Beryl AX GL-MT3000 version 4.7.0

Description An issue was discovered in the device, allowing attackers to download arbitrary files from the device's file system. This is achieved by adding symbolic links on an external drive used as a Samba share.

Recommendations For GL-INet Beryl AX GL-MT3000 version 4.7.0, consider disabling the Samba share feature until a patch is available to prevent attackers from downloading arbitrary files. Restrict access to the device's file system to minimize the risk of exploitation. Avoid using external drives with symbolic links in the Samba share configuration until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2025-03270

CVE-2025-25685

Affected Products

Gl-Inet Beryl Ax Gl-Mt3000

References · 7

• 🔥 https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9 · Exploit
• https://bdu.fstec.ru/vul/2025-03270 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-25685 · Security Note
• https://twitter.com/CVEnew/status/1901679150894600362 · Twitter Post
• https://t.me/cvenotify/115643 · Telegram Post
• https://docs.gl-inet.com/router/en/3/tutorials/file_sharing/?_gl=1*1dua2o4*_ga*MTM1MTM1MjMxNy4xNzQyOTg3NzQ2*_ga_34T6Q5NL0V*MTc0Mjk4Nzc0Ni4xLjEuMTc0Mjk4Nzk1MC4wLjAuMA.. · Note
• https://t.me/cvedetector/20494 · Telegram Post