Skip to content
OpenAdvisories
High · 8.3 CVE-2025-44018 EUVD-2025-198804GHSA-29pc-8vpc-xrwf

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can le…

Published Nov 24, 2025 · Updated Nov 24, 2025 · Assigned by talos

Vendor: GL.iNet Product: GL-AXT1800

Description

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
GL-Inet GL-AXT1800 4.7.0 —

References