CVE-2023-46455 | BDVDB-2026-219082 Detail

gl.inetAR300M

Description#

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://www.gl-inet.com/
https://cyberaz0r.info/2023/11/glinet-multiple-vulnerabilities/

Exploit#

No public exploit known

History#

Version 12023-12-12Record published in the CVE List.
Version 22024-08-28Most recent update recorded in the CVE List.