CRITICAL🇵🇱 Wersja polska

CVE-2024-39226

CVSS 9.8v3.1pub. 2024-08-06upd. 2024-11-12

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a vulnerability can be exploited to manipulate routers by passing malicious shell commands through the s2s API.

🤖 AI Analysis
How it works

An attacker can transmit malicious shell commands through the device's s2s API interface. The vulnerability is classified as command injection (CWE-77) and path traversal (CWE-22), meaning that user-supplied input is not properly validated or filtered before being passed to the system command interpreter. The attack does not require authentication or user interaction and can be performed remotely over the network.

Impact

An attacker can gain full control of the device, including reading sensitive configuration data, modifying router settings, and disrupting its availability. It is also possible to use the device as an entry point to the internal network.

Mitigation & patch

Patches available from the manufacturer should be applied according to the references. It is recommended to monitor the official GL-iNet repository at the address indicated in the references and update the firmware to a version that eliminates the vulnerability as soon as possible. Until the update is applied, consider restricting network access to the s2s API interface at the firewall level.

Who is affected

GL-iNet AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 firmware v4.3.11; MT3000/MT2500/AXT1800/AX1800/A1300/X300B firmware v4.5.16; XE300 firmware v4.3.16; E750 firmware v4.3.12; AP1300/S1300 firmware v4.3.13; XE3000/X3000 firmware v4.4

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Gl Inet A1300

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet A1300 Firmware

    OS
    Gl-Inet
    4.5.16

  • Gl Inet Ap1300

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Ap1300 Firmware

    OS
    Gl-Inet
    3.217

  • Gl Inet Ar300m

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Ar300m16

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Ar300m16 Firmware

    OS
    Gl-Inet
    4.3.11

  • Gl Inet Ar300m Firmware

    OS
    Gl-Inet
    4.3.11

  • Gl Inet Ar750

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Ar750 Firmware

    OS
    Gl-Inet
    4.3.11

  • Gl Inet Ar750s

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Ar750s Firmware

    OS
    Gl-Inet
    4.3.11

  • Gl Inet Ax1800

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Ax1800 Firmware

    OS
    Gl-Inet
    4.5.16

  • Gl Inet Axt1800

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Axt1800 Firmware

    OS
    Gl-Inet
    4.5.16

  • Gl Inet B1300

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet B1300 Firmware

    OS
    Gl-Inet
    4.3.11

  • Gl Inet B2200

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet B2200 Firmware

    OS
    Gl-Inet
    3.216

  • Gl Inet E750

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet E750 Firmware

    OS
    Gl-Inet
    4.3.12

  • Gl Inet Mt1300

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Mt1300 Firmware

    OS
    Gl-Inet
    4.3.11

  • Gl Inet Mt2500

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Mt2500 Firmware

    OS
    Gl-Inet
    4.5.16

  • Gl Inet Mt3000

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Mt3000 Firmware

    OS
    Gl-Inet
    4.5.16

  • Gl Inet Mt300n V2

    HW
    Gl-Inet
    wszystkie wersje

  • Gl Inet Mt300n V2 Firmware

    OS
    Gl-Inet
    4.3.11
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2026-26793CRITICAL9.8PL ✓ten sam produkt

Command injection w GL-iNet GL-AR300M16 via set_config

CVE-2026-26795CRITICAL9.8PL ✓ten sam produkt

Command injection w GL-iNet GL-AR300M16 via parametr module

CVE-2026-26791CRITICAL9.8PL ✓ten sam produkt

Command injection w GL-iNet GL-AR300M16 — wykonanie dowolnych poleceń

CVE-2026-26792CRITICAL9.8PL ✓ten sam produkt

Command injection w GL-iNet GL-AR300M16 — funkcja set_upgrade

CVE-2024-39225CRITICAL9.8PL ✓ten sam produkt

RCE w firmware GL-iNet — obejście mechanizmu logowania