GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| GL.iNet | A1300 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | AX1800 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | AXT1800 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | BE1400 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | BE3600 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | BE6500 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | BE9300 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | BE10000 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | E5800 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | MT2500 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | MT3000 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | MT3600BE | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | MT5000 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | MT6000 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | X2000 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | X3000 | affected |
|
||||||||||||||||||||||||||||||
| GL.iNet | XE3000 | affected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Gl-inet | A1300 |
|
||||||||
| Gl-inet | Ax1800 |
|
||||||||
| Gl-inet | Axt1800 |
|
||||||||
| Gl-inet | Be3600 |
|
||||||||
| Gl-inet | Be6500 |
|
||||||||
| Gl-inet | Be9300 |
|
||||||||
| Gl-inet | E5800 |
|
||||||||
| Gl-inet | Mt2500 |
|
||||||||
| Gl-inet | Mt3000 |
|
||||||||
| Gl-inet | Mt3600be |
|
||||||||
| Gl-inet | Mt5000 |
|
||||||||
| Gl-inet | Mt6000 |
|
||||||||
| Gl-inet | X2000 |
|
||||||||
| Gl-inet | X3000 |
|
||||||||
| Gl-inet | Xe3000 |
|
||||||||
| Gl.inet | Be10000 |
|
||||||||
| Gl.inet | Be1400 |
|
This CVE is not in the KEV list.
Exploit prediction score: 1.8% (1.768% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gl-inet
Gl-inet a1300 Gl-inet ax1800 Gl-inet axt1800 Gl-inet be3600 Gl-inet be6500 Gl-inet be9300 Gl-inet e5800 Gl-inet mt2500 Gl-inet mt3000 Gl-inet mt3600be Gl-inet mt5000 Gl-inet mt6000 Gl-inet x2000 Gl-inet x3000 Gl-inet xe3000 |
|
| Vendors & Products |
Gl-inet
Gl-inet a1300 Gl-inet ax1800 Gl-inet axt1800 Gl-inet be3600 Gl-inet be6500 Gl-inet be9300 Gl-inet e5800 Gl-inet mt2500 Gl-inet mt3000 Gl-inet mt3600be Gl-inet mt5000 Gl-inet mt6000 Gl-inet x2000 Gl-inet x3000 Gl-inet xe3000 |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulation of the argument switch_power/restore_power can lead to os command injection. The attack can be launched remotely. The vendor explains: "After our investigation, we have confirmed that the vulnerability described (...) does indeed exist." | |
| Title | GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection | |
| First Time appeared |
Gl.inet
Gl.inet a1300 Gl.inet ax1800 Gl.inet axt1800 Gl.inet be10000 Gl.inet be1400 Gl.inet be3600 Gl.inet be6500 Gl.inet be9300 Gl.inet e5800 Gl.inet mt2500 Gl.inet mt3000 Gl.inet mt3600be Gl.inet mt5000 Gl.inet mt6000 Gl.inet x2000 Gl.inet x3000 Gl.inet xe3000 |
|
| Weaknesses | CWE-77 CWE-78 |
|
| CPEs | cpe:2.3:a:gl.inet:a1300:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:ax1800:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:axt1800:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:be10000:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:be1400:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:be3600:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:be6500:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:be9300:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:mt2500:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:mt3000:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:mt3600be:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:mt5000:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:mt6000:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:* cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Gl.inet
Gl.inet a1300 Gl.inet ax1800 Gl.inet axt1800 Gl.inet be10000 Gl.inet be1400 Gl.inet be3600 Gl.inet be6500 Gl.inet be9300 Gl.inet e5800 Gl.inet mt2500 Gl.inet mt3000 Gl.inet mt3600be Gl.inet mt5000 Gl.inet mt6000 Gl.inet x2000 Gl.inet x3000 Gl.inet xe3000 |
|
| References |
| |
| Metrics |
cvssV2_0
|