Orta CVSS 5.1 PoC var
CVE-2025-67090: Ax1800 Firmware: güvenlik açığı
Açıklama (NVD)
The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL.Inet AX1800 Version 4.6.4 & 4.6.8 lacks rate limiting or account lockout mechanisms on the authentication endpoint (`/cgi-bin/luci`). An unauthenticated attacker on the local network can perform unlimited password attempts against the admin interface.
Özet bilgiler
- Ürün
- Gl-inet Ax1800 Firmware
- CVSS v3.1
- 5.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - EPSS
- %0,25 (yüzdelik 16)
- CWE
- CWE-307
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gl-inet-ax1800-firmware | 4.2.0 | 4.2.0 | — |
| gl-inet-ax1800-firmware | 4.6.4 | 4.6.4 | — |
| gl-inet-ax1800-firmware | 4.6.8 | 4.6.8 | — |