CVE-2023-47462

Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function

published November 29, 2023

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

🚨 An insecure permissions flaw in GL.iNet AX1800 version 3.215 and earlier opens the door for remote attackers to execute arbitrary code - yikes! 🔥 Think of it like a hotel where anyone can waltz into any room because the front desk is handing out master keys to all guests without checking IDs. That’s how this vulnerability could let attackers roam free inside your system! An attacker could exploit this weakness to run any code they desire, which can lead to devastating consequences like data theft, service disruption, or even complete control of your device. Not something you want happening on your watch!

Put simply

Think of it like a hotel where anyone can waltz into any room because the front desk is handing out master keys to all guests without checking IDs. That’s how this vulnerability could let attackers roam free inside your system! This vulnerability arises from improper permission settings in the file sharing function of the GL.iNet AX1800 router, allowing unauthorized users to execute code remotely as if they were legitimate users.

What to do

An attacker could exploit this weakness to run any code they desire, which can lead to devastating consequences like data theft, service disruption, or even complete control of your device. Not something you want happening on your watch! To safeguard your network, upgrade your GL.iNet AX1800 to version 3.216 or later immediately. Review and tighten your permission settings for file sharing to ensure that only authorized users have access. Don't forget to regularly audit your security settings! You've got this! By taking these swift actions, you'll keep your network secure and your users safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01287 · 69.9th percentile
Published
2023-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function
    cvelistv5