packetstormsecurity.com
http://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html CVE-2023-50445
HIGH
gl-inet gl-mt1300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Record summary
CVE-2023-50445 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local attackers to execute arbitrary code via the get_system_log and get_crash_log functions of the logread module, as well as the upgrade_online function of the upgrade module.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Sep 3, 2025 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 22, 2024 · Source: CVE List
Affected products and versions
Showing 12 of 13| Product | Source | Version range | Status |
|---|---|---|---|
gl-mt1300_firmwareBrowse gl-inet / gl-mt1300_firmware | VulnCheck | Version data not supplied | |
Default status: unknown | CVE List | 4.4.6 | affected |
AR300MBrowse gl.inet / AR300MDefault status: unknown | CVE List | 4.3.7 | affected |
Default status: unknown | CVE List | 4.3.7 | affected |
AR750SBrowse gl.inet / AR750SDefault status: unknown | CVE List | 4.3.7 | affected |
AX1800Browse gl.inet / AX1800Default status: unknown | CVE List | 4.4.6 | affected |
AXT1800Browse gl.inet / AXT1800Default status: unknown | CVE List | 4.4.6 | affected |
Default status: unknown | CVE List | 4.3.7 | affected |
MT1300Browse gl.inet / MT1300Default status: unknown | CVE List | 4.3.7 | affected |
MT2500Browse gl.inet / MT2500Default status: unknown | CVE List | 4.4.6 | affected |
MT3000Browse gl.inet / MT3000Default status: unknown | CVE List | 4.4.6 | affected |
MT300N_V2Browse gl.inet / MT300N_V2Default status: unknown | CVE List | 4.3.7 | affected |
Proofs of concept
1Catalogued exploits
MetasploitGL.iNet Unauthenticated Remote Command Execution via the logread module.Metasploit exploitby DZONERZY +2 moreNot analyzed1 file
References
3github.com
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Using%20Shell%20Metacharacter%20Injection%20via%20API.md nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-50445