CVE-2023-46455

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload…

published December 12, 2023

CVSS

—

EPSS

47%

Percentile

98.8

In the wild

Unconfirmed

What it is

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.46966 · 98.8th percentile
Published: 2023-12-12T00:00Z

EPSS history

Timeline

12 DEC 00:00Z
In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload…
cvelistv5