GL.iNet AR750 FIRMWARE 4.3.11
Approved changes feed: RSS · Atom
cpe:2.3:o:gl-inet:ar750_firmware:4.3.11:*:*:*:*:*:*:*
part: o version: 4.3.11 update: *
| Vendor | Gl Inet (0ba6498a-0971-5dec-92da-bb83b4dab2f2) |
|---|---|
| Product | Ar750 Firmware (022dab3e-a918-5da4-b75d-365d8a46bce6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39229 |
vulnerable | 2026-06-08 06:41:48.900188 |
Details available
An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-11-21T18:43:08.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39228 |
vulnerable | 2026-06-08 06:41:48.885337 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a shell injection vulnerability via the interface check_ovpn_client_config and check_config.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-08-15T15:36:52.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39227 |
vulnerable | 2026-06-08 06:41:48.882998 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure permissions in the endpoint /cgi-bin/glc. This vulnerability allows unauthenticated attackers to execute arbitrary code or possibly a directory traversal via crafted JSON data.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-08-15T15:40:35.188Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39226 |
vulnerable | 2026-06-08 06:41:48.860466 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a vulnerability can be exploited to manipulate routers by passing malicious shell commands through the s2s API.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-11-12T17:08:43.264Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39225 |
vulnerable | 2026-06-08 06:41:48.826431 |
Details available
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain a remote code execution (RCE) vulnerability.
Published: 2024-08-06T00:00:00.000Z
Updated: 2024-08-15T15:31:54.275Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.