CVE-2023-46456: Critical severity gl-inet Gl-ar300m Firmware vulnerability
Published Dec 12, 2023
·Updated
In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.
Affected Software
2 affected components
All of the following
gl-inet Gl-ar300m Firmware=3.216
gl-inet Gl-ar300m
Event History
Dec 12, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-46456?
CVE-2023-46456 is considered a high severity vulnerability due to its potential to allow unauthorized command execution.
2
How can I fix CVE-2023-46456?
To fix CVE-2023-46456, upgrade the firmware of your GL.iNET GL-AR300M router to the latest version provided by the manufacturer.
3
What are the consequences of exploiting CVE-2023-46456?
Exploiting CVE-2023-46456 could allow an attacker to execute arbitrary shell commands, compromising the router's security.
4
Which devices are affected by CVE-2023-46456?
CVE-2023-46456 affects GL.iNET GL-AR300M routers specifically running firmware version 3.216.
5
Is there a workaround for CVE-2023-46456 before upgrading?
Currently, there are no documented workarounds for CVE-2023-46456, and the best practice is to update the firmware.