Yüksek CVSS 8.1 PoC var
CVE-2025-67089: Gl-axt1800 Firmware: komut enjeksiyonu
Açıklama (NVD)
A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges
Özet bilgiler
- Ürün
- Gl-inet Gl-axt1800 Firmware
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - EPSS
- %1,60 (yüzdelik 76)
- CWE
- CWE-77
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gl-inet-gl-axt1800-firmware | 4.2.0 | 4.2.0 | — |
| gl-inet-gl-axt1800-firmware | 4.6.4 | 4.6.4 | — |
| gl-inet-gl-axt1800-firmware | 4.6.8 | 4.6.8 | — |