1. Home
  2. CVE Database
  3. CVE-2024-45260
HIGH · 8.0

CVE-2024-45260

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby...

Vulnerability Description

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it.

CVSS Score

8.0

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Gl-InetMt6000 Firmware4.6.2
Gl-InetMt6000-
Gl-InetB1300 Firmware4.3.17
Gl-InetB1300-
Gl-InetMt2500 Firmware>= 4.6.2, < 4.6.4
Gl-InetMt2500-
Gl-InetAxt1800 Firmware>= 4.6.2, < 4.6.4
Gl-InetAxt1800-
Gl-InetAx1800 Firmware>= 4.6.2, < 4.6.4
Gl-InetAx1800-
Gl-InetB3000 Firmware4.5.18
Gl-InetB3000-
Gl-InetA1300 Firmware4.5.17
Gl-InetA1300-
Gl-InetX300B Firmware4.5.17
Gl-InetX300B-
Gl-InetX3000 Firmware4.4.9
Gl-InetX3000-
Gl-InetXe3000 Firmware4.4.9
Gl-InetXe3000-

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2024-45260?

CVE-2024-45260 is a vulnerability with a CVSS score of 8.0 (HIGH). An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby...

How severe is CVE-2024-45260?

CVE-2024-45260 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-45260?

Check the references section above for vendor advisories and patch information. Affected products include: Gl-Inet Mt6000 Firmware, Gl-Inet Mt6000, Gl-Inet B1300 Firmware, Gl-Inet B1300, Gl-Inet Mt2500 Firmware.