Vulnerabilities (CVE)

Filtered by vendor Gl-inet Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-42055 1 Gl-inet 1 Goodcloud 2023-08-08 N/A 6.5 MEDIUM
Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system.
CVE-2021-44148 1 Gl-inet 2 Gl-ar150, Gl-ar150 Firmware 2021-12-09 4.3 MEDIUM 6.1 MEDIUM
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.
CVE-2019-6273 1 Gl-inet 2 Gl-ar300m-lite, Gl-ar300m-lite Firmware 2020-08-24 4.0 MEDIUM 6.5 MEDIUM
download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.