Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3…

published 2023-12-28 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-55237

cvss: 7.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 9.1%; EPSS 9.1% chance of exploitation in 30 days, percentile 95%
public exploits: 1; Metasploit

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local attackers to execute arbitrary code via the get_system_log and get_crash_log functions of the logread module, as well as the upgrade_online function of the upgrade module.

Timeline

2023-12-10 First public exploit (Metasploit exploit/linux/http/glinet_unauth_rce_cve_2023_50445)
2023-12-28 Published

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago (2024-04-22)

Exploit prediction

9.12% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/linux/http/glinet_unauth_rce_cve_2023_50445 GL.iNet Unauthenticated Remote Command Execution via the logread module. metasploit exploit, excellent rank, 2023-12-10
github.com https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Using%20Shell%20Metacharacter%20Injection%20via%20API.md referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

gl.inet AX1800
gl.inet A1300
gl.inet AXT1800
gl.inet MT3000
gl.inet MT2500
gl.inet MT6000
gl.inet MT1300
gl.inet MT300N_V2
gl.inet AR750S
gl.inet AR750
gl.inet AR300M
gl.inet B1300

Classification

Weakness

CWE-77 Improper Neutralization of Special Elements used in a Command
CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

CVE List CVE-2023-50445
NVD CVE-2023-50445

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary