Critical severity · published Aug 6, 2024
CVE-2024-39226
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
9.8
CVSS
20.4%
EPSS
No
On KEV
Description
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a vulnerability can be exploited to manipulate routers by passing malicious shell commands through the s2s API.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)20.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
A1300 Firmware · Gl-inet
4.5.16 · source: NVD
AF
Ap1300 Firmware · Gl-inet
3.217 · source: NVD
AF
Ar300m Firmware · Gl-inet
4.3.11 · source: NVD
AF
Ar300m16 Firmware · Gl-inet
4.3.11 · source: NVD
AF
Ar750 Firmware · Gl-inet
4.3.11 · source: NVD
AF
Ar750s Firmware · Gl-inet
4.3.11 · source: NVD
AF
Ax1800 Firmware · Gl-inet
4.5.16 · source: NVD
AF
Axt1800 Firmware · Gl-inet
4.5.16 · source: NVD
BF
B1300 Firmware · Gl-inet
4.3.11 · source: NVD
BF
B2200 Firmware · Gl-inet
3.216 · source: NVD
EF
E750 Firmware · Gl-inet
4.3.12 · source: NVD
MF
Mt1300 Firmware · Gl-inet
4.3.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-39226
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-39226
Exploit
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/s2s%20interface%20shell%20injection.md
More from A1300 Firmware
9.8
CVE-2024-39225
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
9.8
CVE-2024-39228
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
9.8
CVE-2024-39227
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,…
8.8
CVE-2024-45262
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2
8.8
CVE-2024-45263
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2