Description
In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- GL.iNet <= 4.3.7 - Arbitrary File Write http/cves/2023/CVE-2023-46455.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.