Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-31472 Details

Description

An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md	CVE	ExploitVendor Advisory
https://www.gl-inet.com	CVE	Vendor Advisory
https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md	[email protected]	ExploitVendor Advisory
https://www.gl-inet.com	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-770	Allocation of Resources Without Limits or Throttling	[email protected]
CWE-770	Allocation of Resources Without Limits or Throttling	CISA-ADP

Affected Products

Product	Versions
gl-inet gl-s20 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s20_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s20	All versions
CPE cpe:2.3:h:gl-inet:gl-s20:-:::::::* Remediation No remediation found in references.
gl-inet gl-x3000 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x3000_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x3000	All versions
CPE cpe:2.3:h:gl-inet:gl-x3000:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt3000 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt3000_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt3000	All versions
CPE cpe:2.3:h:gl-inet:gl-mt3000:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt2500 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt2500_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt2500	All versions
CPE cpe:2.3:h:gl-inet:gl-mt2500:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt2500a firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt2500a_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt2500a	All versions
CPE cpe:2.3:h:gl-inet:gl-mt2500a:-:::::::* Remediation No remediation found in references.
gl-inet gl-axt1800 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-axt1800_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-axt1800	All versions
CPE cpe:2.3:h:gl-inet:gl-axt1800:-:::::::* Remediation No remediation found in references.
gl-inet gl-a1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-a1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-a1300	All versions
CPE cpe:2.3:h:gl-inet:gl-a1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-ax1800 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ax1800_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ax1800	All versions
CPE cpe:2.3:h:gl-inet:gl-ax1800:-:::::::* Remediation No remediation found in references.
gl-inet gl-sft1200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-sft1200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-sft1200	All versions
CPE cpe:2.3:h:gl-inet:gl-sft1200:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt1300	All versions
CPE cpe:2.3:h:gl-inet:gl-mt1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-e750 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-e750_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-e750	All versions
CPE cpe:2.3:h:gl-inet:gl-e750:-:::::::* Remediation No remediation found in references.
gl-inet gl-mv1000 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mv1000_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mv1000	All versions
CPE cpe:2.3:h:gl-inet:gl-mv1000:-:::::::* Remediation No remediation found in references.
gl-inet gl-mv1000w firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mv1000w_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mv1000w	All versions
CPE cpe:2.3:h:gl-inet:gl-mv1000w:-:::::::* Remediation No remediation found in references.
gl-inet gl-s10 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s10_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s10	All versions
CPE cpe:2.3:h:gl-inet:gl-s10:-:::::::* Remediation No remediation found in references.
gl-inet gl-s200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s200	All versions
CPE cpe:2.3:h:gl-inet:gl-s200:-:::::::* Remediation No remediation found in references.
gl-inet gl-s1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s1300	All versions
CPE cpe:2.3:h:gl-inet:gl-s1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-sf1200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-sf1200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-sf1200	All versions
CPE cpe:2.3:h:gl-inet:gl-sf1200:-:::::::* Remediation No remediation found in references.
gl-inet gl-b1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-b1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-b1300	All versions
CPE cpe:2.3:h:gl-inet:gl-b1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-b2200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-b2200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-b2200	All versions
CPE cpe:2.3:h:gl-inet:gl-b2200:-:::::::* Remediation No remediation found in references.
gl-inet gl-ap1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ap1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ap1300	All versions
CPE cpe:2.3:h:gl-inet:gl-ap1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-ap1300lte firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ap1300lte_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ap1300lte	All versions
CPE cpe:2.3:h:gl-inet:gl-ap1300lte:-:::::::* Remediation No remediation found in references.
gl-inet gl-x1200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x1200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x1200	All versions
CPE cpe:2.3:h:gl-inet:gl-x1200:-:::::::* Remediation No remediation found in references.
gl-inet gl-x750 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x750_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x750	All versions
CPE cpe:2.3:h:gl-inet:gl-x750:-:::::::* Remediation No remediation found in references.
gl-inet gl-x300b firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x300b_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x300b	All versions
CPE cpe:2.3:h:gl-inet:gl-x300b:-:::::::* Remediation No remediation found in references.
gl-inet gl-xe300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-xe300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-xe300	All versions
CPE cpe:2.3:h:gl-inet:gl-xe300:-:::::::* Remediation No remediation found in references.
gl-inet gl-ar750s firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ar750s_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ar750s	All versions
CPE cpe:2.3:h:gl-inet:gl-ar750s:-:::::::* Remediation No remediation found in references.
gl-inet gl-ar750 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ar750_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ar750	All versions
CPE cpe:2.3:h:gl-inet:gl-ar750:-:::::::* Remediation No remediation found in references.
gl-inet gl-mifi firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mifi_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mifi	All versions
CPE cpe:2.3:h:gl-inet:gl-mifi:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt300n-v2 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt300n-v2	All versions
CPE cpe:2.3:h:gl-inet:gl-mt300n-v2:-:::::::* Remediation No remediation found in references.
gl-inet gl-ar300m firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ar300m_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ar300m	All versions
CPE cpe:2.3:h:gl-inet:gl-ar300m:-:::::::* Remediation No remediation found in references.
gl-inet gl-usb150 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-usb150_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-usb150	All versions
CPE cpe:2.3:h:gl-inet:gl-usb150:-:::::::* Remediation No remediation found in references.
gl-inet microuter-n300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:microuter-n300_firmware:::::::: Remediation No remediation found in references.
gl-inet microuter-n300	All versions
CPE cpe:2.3:h:gl-inet:microuter-n300:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jan 29, 2025	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 17, 2023	Initial Analysis	[email protected]

CVE-2023-31472 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation