Critical · 9.8 CVE-2023-47463 EUVD-2023-51575GHSA-vxh2-r3fh-mqh4

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a cr…

Published Nov 30, 2023 · Updated Oct 16, 2024 · Assigned by mitre

Description

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the gl_nas_sys authentication function.

References

https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/an%20unauthenticated%20remote%20code%20execution.md