CVE-2024-27356 in the critical feed json
An issue was discovered on certain GL-iNet devices.
published 2024-02-27 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-24560
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 23.9%
- EPSS 23.9% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.
Timeline
- Published
- First public exploit (EDB-51942)
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
23.91% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-51942 GL-iNet MT6000 4.5.5 - Arbitrary File Download remote, 2024-04-02
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
- gl-inet mt1300
- gl-inet ar750
- gl-inet ar750s
- gl.inet MT6000
- gl-inet xe3000
- gl-inet x3000
- gl-inet mt3000
- gl-inet mt2500
- gl-inet axt1800
- gl-inet ax1800
- gl-inet a1300
- gl-inet s200
- gl-inet 0300
- gl-inet x750
- gl-inet sft1200
- gl-inet xe300
- gl-inet ar3000m
- gl-inet ar3000m16
- gl-inet b1300
- gl-inet mt300nv2
- gl-inet x300b
- gl-inet s1300
- gl-inet sf1200
- gl-inet mv1000
- gl-inet n300
- gl-inet b2200
- gl-i x1200
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
gl-inet.com
product
-
github.com
/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md
third-party-advisory
Sources
- CVE List CVE-2024-27356
- NVD CVE-2024-27356
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.