CVE-2023-50921: Critical severity gl-inet Gl-mt1300 Firmware vulnerability
An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50921?
CVE-2023-50921 has a high severity due to the potential for attackers to gain root privileges on affected GL.iNet devices.
How do I fix CVE-2023-50921?
To fix CVE-2023-50921, upgrade your GL.iNet device firmware to the latest available version that addresses this vulnerability.
Which GL.iNet devices are affected by CVE-2023-50921?
CVE-2023-50921 affects several GL.iNet devices, including A1300, AX1800, AXT1800, MT3000, MT2500, and MT6000 among others.
Can CVE-2023-50921 be exploited remotely?
Yes, CVE-2023-50921 can be exploited remotely if the attacker has access to the add_user interface on the vulnerable devices.
What is the impact of CVE-2023-50921?
The impact of CVE-2023-50921 is significant as it allows unauthorized users to gain root access, potentially compromising device integrity and security.