CVE-2024-45262: Path Traversal
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to execute scripts under any path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45262?
CVE-2024-45262 is considered a high-severity vulnerability due to its potential for arbitrary script execution.
How do I fix CVE-2024-45262?
To fix CVE-2024-45262, you should update your GL-iNet devices to the latest firmware version that addresses this vulnerability.
Which devices are affected by CVE-2024-45262?
CVE-2024-45262 affects several GL-iNet devices including MT6000, MT3000, MT2500, AXT1800, and AX1800.
What type of vulnerability is CVE-2024-45262?
CVE-2024-45262 is a directory traversal vulnerability that allows attackers to execute unauthorized scripts.
Can CVE-2024-45262 be exploited remotely?
Yes, CVE-2024-45262 can be exploited remotely if the device is exposed to the internet.