GCVE - cpe:2.3:o:gl-inet:mt3000_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:gl-inet:mt3000_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Gl Inet (`0ba6498a-0971-5dec-92da-bb83b4dab2f2`)
Product	Mt3000 Firmware (`3e5580bd-7981-5975-8c77-cefe8fc4d700`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-11406`	vulnerable	2026-06-08 07:47:14.140253	GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection MEDIUM (6.3) A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.9.0_beta3-1012-0513-1778656146 is able to resolve this issue. You should upgrade the affected component. The vendor confirms: "This issue has been addressed by implementing malicious checks on OpenVPN configuration files to prevent command injection attacks carried through malicious configuration files." Published: 2026-06-06T09:15:12.019Z Updated: 2026-06-08T16:27:56.919Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/368966 https://vuldb.com/vuln/368966/cti https://vuldb.com/cve/CVE-2026-11406 https://vuldb.com/submit/820049 https://github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/ovpn_client_import	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45263`	vulnerable	2026-06-08 06:45:55.741682	Details available An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to information leakage, enabling complete control. Published: 2024-10-24T00:00:00.000Z Updated: 2024-10-28T18:52:30.245Z Open on db.gcve.eu Reference links https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Arbitrary%20File%20Upload%20to%20ovpn_upload%20via%20Upload%20Interface.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.