CVE-2023-31472
PoC —CVSS 3.1
7.5 high
EPSS
20%p97
Published
()
Modified
Description
An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.
- Vendors
- gl-inet
- Products
- gl-s20 firmware, gl-x3000 firmware, gl-mt3000 firmware, gl-mt2500 firmware, gl-mt2500a firmware, gl-axt1800 firmware, gl-a1300 firmware, gl-ax1800 firmware, gl-sft1200 firmware, gl-mt1300 firmware, gl-e750 firmware, gl-mv1000 firmware
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.