CVSS 3.1
8.0 highCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-45260
High (8.0) in gl-inet. EPSS 4.1% chance of exploitation in the next 30 days.
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it.
Severity
- EPSS
- 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gl-inet:a1300_firmware
- gl-inet:ar300m16_firmware
- gl-inet:ar300m_firmware
- gl-inet:ar750_firmware
- gl-inet:ar750s_firmware
- gl-inet:ax1800_firmware
- gl-inet:axt1800_firmware
- gl-inet:b1300_firmware
- gl-inet:b3000_firmware
- gl-inet:e750_firmware
- gl-inet:mt1300_firmware
- gl-inet:mt2500_firmware
- gl-inet:mt3000_firmware
- gl-inet:mt300n-v2_firmware
- gl-inet:mt6000_firmware
- gl-inet:sft1200_firmware
- gl-inet:x3000_firmware
- gl-inet:x300b_firmware
- gl-inet:x750_firmware
- gl-inet:xe3000_firmware
- gl-inet:xe300_firmware