Ax1800 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:gl-inet:ax1800_firmware:4.6.8:*:*:*:*:*:*:*
part: o version: 4.6.8 update: *
| Vendor | Gl Inet (0ba6498a-0971-5dec-92da-bb83b4dab2f2) |
|---|---|
| Product | Ax1800 Firmware (ba3eed4c-bc35-5410-aa87-ad5b12dcb296) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-67091 |
vulnerable | 2026-06-08 07:41:19.694533 |
Details available
An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-writable /tmp directory.
Published: 2026-01-08T00:00:00.000Z
Updated: 2026-01-08T16:10:44.603Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67090 |
vulnerable | 2026-06-08 07:41:19.692491 |
Details available
The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL.Inet AX1800 Version 4.6.4 & 4.6.8 lacks rate limiting or account lockout mechanisms on the authentication endpoint (`/cgi-bin/luci`). An unauthenticated attacker on the local network can perform unlimited password attempts against the admin interface.
Published: 2026-01-08T00:00:00.000Z
Updated: 2026-01-08T16:51:52.244Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.