CVE-2019-6274: Path Traversal
Published Mar 19, 2019
·Updated
Directory traversal vulnerability in storagecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences.
Affected Software
4 affected components
gl-inet Gl-ar300m-lite Firmware=2.27
gl-inet Gl-ar300m-lite
All of the following
gl-inet Gl-ar300m-lite Firmware=2.27
gl-inet Gl-ar300m-lite
Event History
Mar 19, 2019
CVE Published
via MITRE·07:49 PM
Data Sourced
via MITRE·07:49 PM
Description
Mar 21, 2019
Data Sourced
via NVD·04:01 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-6274.
2
What is the severity of CVE-2019-6274?
The severity of CVE-2019-6274 is high with a severity value of 8.8.
3
How does the vulnerability CVE-2019-6274 affect GL.iNet GL-AR300M-Lite devices?
The vulnerability CVE-2019-6274 allows remote attackers to have unspecified impact via directory traversal sequences in the storage_cgi of GL.iNet GL-AR300M-Lite devices with firmware 2.27.
4
What is the affected software for vulnerability CVE-2019-6274?
The affected software for vulnerability CVE-2019-6274 is GL.iNet GL-AR300M-Lite devices with firmware 2.27.
5
How can I fix vulnerability CVE-2019-6274?
To fix vulnerability CVE-2019-6274, update the firmware of GL.iNet GL-AR300M-Lite devices to a version that is not vulnerable.