CVE-2023-31472

Summary

An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.gl-inet.com
• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.gl-inet.com
• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md

• ←Previous
• Next→