Fiche vulnérabilité
CVE-2023-31471 : faille critique gl-inet gl-s20 firmware (CVSS 9.8)
Description
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install software from the filesystem, the package list, or a URL.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 10 mai 2023
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- gl-inet gl-s20 firmware
- gl-inet gl-x3000 firmware
- gl-inet gl-mt3000 firmware
- gl-inet gl-mt2500 firmware
- gl-inet gl-mt2500a firmware
- gl-inet gl-axt1800 firmware
- gl-inet gl-a1300 firmware
- gl-inet gl-ax1800 firmware
- gl-inet gl-sft1200 firmware
- gl-inet gl-mt1300 firmware
- gl-inet gl-e750 firmware
- gl-inet gl-mv1000 firmware
- gl-inet gl-mv1000w firmware
- gl-inet gl-s10 firmware
- gl-inet gl-s200 firmware
- gl-inet gl-s1300 firmware
- gl-inet gl-sf1200 firmware
- gl-inet gl-b1300 firmware
- gl-inet gl-b2200 firmware
- gl-inet gl-ap1300 firmware