PT-2025-17955 · Gl.Inet · Gl.Inet Router Firmware

Olivier · Published 2025-04-26 · Updated 2025-04-26 · CVE-2025-2850

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Low

Base vector

AV:A/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GL.iNet router firmware versions 4.x

Description A vulnerability was found in the Download Interface component of the GL.iNet router firmware, affecting some unknown processing. The manipulation leads to improper authorization.

Recommendations For version 4.x, it is recommended to upgrade the affected component.

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2025-2850

Affected Products

Gl.Inet Router Firmware

References · 9

• https://gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-apr-24-2025 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-2850 · Security Note
• https://vuldb.com/?id.306287 · Note
• https://t.me/cvenotify/119907 · Telegram Post
• https://vuldb.com/?ctiid.306287 · Note
• https://t.me/cvedetector/23804 · Telegram Post
• https://twitter.com/CVEnew/status/1916033813248933971 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1916050078386573810 · Twitter Post
• https://t.me/cvetracker/22416 · Telegram Post