Skip to content
Fencer Vulns
critical 9.8

CVE-2024-39227 json

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16…

published 2024-08-06 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-37873

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.2%
EPSS 1.2% chance of exploitation in 30 days, percentile 68%
public exploits
0
none known

Summary

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure permissions in the endpoint /cgi-bin/glc. This vulnerability allows unauthenticated attackers to execute arbitrary code or possibly a directory traversal via crafted JSON data.

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
total
Assessed
2 y ago

Exploit prediction

1.19% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Access%20to%20the%20C%20library%20without%20logging%20in.md referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • gl-inet gl-mt2500
  • gl-inet gl-axt1800
  • gl-inet gl-ax1800
  • gl-inet gl-a1300
  • gl-inet gl-x300b
  • gl-inet gl-xe300
  • gl-inet gl-e750
  • gl-inet gl-ap1300
  • gl-inet gl-s1300
  • gl-inet gl-xe3000
  • gl-inet gl-x3000
  • gl-inet gl-ar750
  • gl-inet gl-ar750s
  • gl-inet gl-ar300m
  • gl-inet gl-ar300m16
  • gl-inet gl-ar300n-v2
  • gl-inet gl-b1300
  • gl-inet gl-mt1300
  • gl-inet gl-sft1200
  • gl-inet gl-x750
  • gl-inet gl-mt3000

Classification

Weakness
  • CWE-75 Failure to Sanitize Special Elements into a Different Plane
  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.