GCVE - cpe:2.3:h:gl-inet:x3000:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:gl-inet:x3000:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Gl Inet (`0ba6498a-0971-5dec-92da-bb83b4dab2f2`)
Product	X3000 (`7b072082-3ab5-5540-9dfc-93b64fd9b3b4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-45263`	not_vulnerable	2026-06-08 06:45:55.742653	Details available An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to information leakage, enabling complete control. Published: 2024-10-24T00:00:00.000Z Updated: 2024-10-28T18:52:30.245Z Open on db.gcve.eu Reference links https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Arbitrary%20File%20Upload%20to%20ovpn_upload%20via%20Upload%20Interface.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45262`	not_vulnerable	2026-06-08 06:45:55.709685	Details available An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to execute scripts under any path. Published: 2024-10-24T00:00:00.000Z Updated: 2024-10-28T19:22:25.505Z Open on db.gcve.eu Reference links https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Improper%20Pathname%20Restriction%20Leading%20to%20Path%20Traversal%20in%20Restricted%20Directories.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45261`	not_vulnerable	2026-06-08 06:45:55.706184	Details available An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not tied to that user itself, which allows other users to potentially use it for authentication. Once an attacker bypasses the application's authentication procedures, they can generate a valid SID, escalate privileges, and gain full control. Published: 2024-10-24T00:00:00.000Z Updated: 2024-10-28T19:19:59.290Z Open on db.gcve.eu Reference links https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Bypassing%20Login%20Mechanism%20with%20Passwordless%20User%20Login.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45260`	not_vulnerable	2026-06-08 06:45:55.702706	Details available An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it. Published: 2024-10-24T00:00:00.000Z Updated: 2024-10-28T19:27:01.398Z Open on db.gcve.eu Reference links https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Unauthorized%20Access%20to%20File%20Download%20and%20Upload%20Interfaces.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45259`	not_vulnerable	2026-06-08 06:45:55.678988	Details available An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property in the download interface, any file on the device can be deleted. Published: 2024-10-24T00:00:00.000Z Updated: 2024-10-28T19:38:53.728Z Open on db.gcve.eu Reference links https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Delete%20Any%20File%20via%20Download%20Interface.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39229`	not_vulnerable	2026-06-08 06:41:48.899194	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39228`	not_vulnerable	2026-06-08 06:41:48.896318	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39227`	not_vulnerable	2026-06-08 06:41:48.882468	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39226`	not_vulnerable	2026-06-08 06:41:48.859766	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39225`	not_vulnerable	2026-06-08 06:41:48.840552	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28077`	not_vulnerable	2026-06-08 06:33:26.401242	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27356`	not_vulnerable	2026-06-08 06:31:28.618116	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.