CVE-2023-24261: OS Command Injection
Published Jun 21, 2023
·Updated
A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request.
Affected Software
4 affected components
All of the following
gl-inet Gl-e750 Firmware<3.216
gl-inet Gl-e750
gl-inet Gl-e750 Firmware<3.216
gl-inet Gl-e750
Event History
Jun 21, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability associated with CVE-2023-24261?
CVE-2023-24261 is a vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 that allows authenticated attackers to execute arbitrary code.
2
How can an attacker exploit CVE-2023-24261?
An attacker can exploit CVE-2023-24261 by sending a crafted POST request.
3
Who is affected by CVE-2023-24261?
GL.iNET GL-E750 Mudi devices before firmware v3.216 are affected by CVE-2023-24261.
4
What is the severity of CVE-2023-24261?
CVE-2023-24261 has a severity rating of 7.2 (high).
5
How can I fix the vulnerability associated with CVE-2023-24261?
To fix CVE-2023-24261, update GL.iNET GL-E750 Mudi firmware to version 3.216 or higher.