cyberaz0r.info
https://cyberaz0r.info/2023/11/glinet-multiple-vulnerabilities CVE-2023-46454
CRITICAL
Record summary
CVE-2023-46454 has a selected CVSS score of 9.8 (critical); EIP currently links 1 repository PoC.
Description
In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
Proofs of concept
1Repository PoCs
GitHubcyberaz0r/GL.iNet-Multiple-VulnerabilitiesRepository PoCby cyberaz0rStars: 3Not analyzed4 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-46454