cbcvebase.
CVE-2023-31473
published 2023-05-11

CVE-2023-31473: An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem…

PriorityP434medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
EPSS
3.87%
88.9th percentile
An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to read an arbitrary file name while using root privileges. The -f option can be used with a configuration file.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
gl-inetgl-a1300_firmware< 3.2163.216
gl-inetgl-ap1300_firmware< 3.2163.216
gl-inetgl-ap1300lte_firmware< 3.2163.216
gl-inetgl-ar300m_firmware< 3.2163.216
gl-inetgl-ar750_firmware< 3.2163.216
gl-inetgl-ar750s_firmware< 3.2163.216
gl-inetgl-ax1800_firmware< 3.2163.216
gl-inetgl-axt1800_firmware< 3.2163.216
gl-inetgl-b1300_firmware< 3.2163.216
gl-inetgl-b2200_firmware< 3.2163.216
gl-inetgl-e750_firmware< 3.2163.216
gl-inetgl-mifi_firmware< 3.2163.216
gl-inetgl-mt1300_firmware< 3.2163.216
gl-inetgl-mt2500_firmware< 3.2163.216
gl-inetgl-mt2500a_firmware< 3.2163.216
gl-inetgl-mt3000_firmware< 3.2163.216
gl-inetgl-mt300n-v2_firmware< 3.2163.216
gl-inetgl-mv1000_firmware< 3.2163.216
gl-inetgl-mv1000w_firmware< 3.2163.216
gl-inetgl-s10_firmware< 3.2163.216
gl-inetgl-s1300_firmware< 3.2163.216
gl-inetgl-s200_firmware< 3.2163.216
gl-inetgl-s20_firmware< 3.2163.216
gl-inetgl-sf1200_firmware< 3.2163.216
gl-inetgl-sft1200_firmware< 3.2163.216
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.