GL.iNet XE3000 FIRMWARE 4.4.8
Approved changes feed: RSS · Atom
cpe:2.3:o:gl-inet:xe3000_firmware:4.4.8:*:*:*:*:*:*:*
part: o version: 4.4.8 update: *
| Vendor | Gl Inet (0ba6498a-0971-5dec-92da-bb83b4dab2f2) |
|---|---|
| Product | Xe3000 Firmware (7a444bea-148a-5c17-a0ca-92282ceafa68) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39229 |
vulnerable | 2026-06-08 06:41:48.899381 |
Details available
An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-11-21T18:43:08.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39228 |
vulnerable | 2026-06-08 06:41:48.896456 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a shell injection vulnerability via the interface check_ovpn_client_config and check_config.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-08-15T15:36:52.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39227 |
vulnerable | 2026-06-08 06:41:48.882488 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure permissions in the endpoint /cgi-bin/glc. This vulnerability allows unauthenticated attackers to execute arbitrary code or possibly a directory traversal via crafted JSON data.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-08-15T15:40:35.188Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39226 |
vulnerable | 2026-06-08 06:41:48.859782 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a vulnerability can be exploited to manipulate routers by passing malicious shell commands through the s2s API.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-11-12T17:08:43.264Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39225 |
vulnerable | 2026-06-08 06:41:48.822524 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a remote code execution (RCE) vulnerability.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-08-15T15:31:54.275Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.