Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-31474 Details

Description

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md	CVE	Exploit
https://www.gl-inet.com	CVE	Vendor Advisory
https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md	[email protected]	Exploit
https://www.gl-inet.com	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
gl-inet gl-s20 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s20_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s20	All versions
CPE cpe:2.3:h:gl-inet:gl-s20:-:::::::* Remediation No remediation found in references.
gl-inet gl-x3000 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x3000_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x3000	All versions
CPE cpe:2.3:h:gl-inet:gl-x3000:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt3000 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt3000_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt3000	All versions
CPE cpe:2.3:h:gl-inet:gl-mt3000:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt2500 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt2500_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt2500	All versions
CPE cpe:2.3:h:gl-inet:gl-mt2500:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt2500a firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt2500a_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt2500a	All versions
CPE cpe:2.3:h:gl-inet:gl-mt2500a:-:::::::* Remediation No remediation found in references.
gl-inet gl-axt1800 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-axt1800_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-axt1800	All versions
CPE cpe:2.3:h:gl-inet:gl-axt1800:-:::::::* Remediation No remediation found in references.
gl-inet gl-a1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-a1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-a1300	All versions
CPE cpe:2.3:h:gl-inet:gl-a1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-ax1800 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ax1800_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ax1800	All versions
CPE cpe:2.3:h:gl-inet:gl-ax1800:-:::::::* Remediation No remediation found in references.
gl-inet gl-sft1200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-sft1200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-sft1200	All versions
CPE cpe:2.3:h:gl-inet:gl-sft1200:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt1300	All versions
CPE cpe:2.3:h:gl-inet:gl-mt1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-e750 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-e750_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-e750	All versions
CPE cpe:2.3:h:gl-inet:gl-e750:-:::::::* Remediation No remediation found in references.
gl-inet gl-mv1000 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mv1000_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mv1000	All versions
CPE cpe:2.3:h:gl-inet:gl-mv1000:-:::::::* Remediation No remediation found in references.
gl-inet gl-mv1000w firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mv1000w_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mv1000w	All versions
CPE cpe:2.3:h:gl-inet:gl-mv1000w:-:::::::* Remediation No remediation found in references.
gl-inet gl-s10 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s10_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s10	All versions
CPE cpe:2.3:h:gl-inet:gl-s10:-:::::::* Remediation No remediation found in references.
gl-inet gl-s200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s200	All versions
CPE cpe:2.3:h:gl-inet:gl-s200:-:::::::* Remediation No remediation found in references.
gl-inet gl-s1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-s1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-s1300	All versions
CPE cpe:2.3:h:gl-inet:gl-s1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-sf1200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-sf1200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-sf1200	All versions
CPE cpe:2.3:h:gl-inet:gl-sf1200:-:::::::* Remediation No remediation found in references.
gl-inet gl-b1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-b1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-b1300	All versions
CPE cpe:2.3:h:gl-inet:gl-b1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-b2200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-b2200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-b2200	All versions
CPE cpe:2.3:h:gl-inet:gl-b2200:-:::::::* Remediation No remediation found in references.
gl-inet gl-ap1300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ap1300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ap1300	All versions
CPE cpe:2.3:h:gl-inet:gl-ap1300:-:::::::* Remediation No remediation found in references.
gl-inet gl-ap1300lte firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ap1300lte_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ap1300lte	All versions
CPE cpe:2.3:h:gl-inet:gl-ap1300lte:-:::::::* Remediation No remediation found in references.
gl-inet gl-x1200 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x1200_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x1200	All versions
CPE cpe:2.3:h:gl-inet:gl-x1200:-:::::::* Remediation No remediation found in references.
gl-inet gl-x750 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x750_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x750	All versions
CPE cpe:2.3:h:gl-inet:gl-x750:-:::::::* Remediation No remediation found in references.
gl-inet gl-x300b firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-x300b_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-x300b	All versions
CPE cpe:2.3:h:gl-inet:gl-x300b:-:::::::* Remediation No remediation found in references.
gl-inet gl-xe300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-xe300_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-xe300	All versions
CPE cpe:2.3:h:gl-inet:gl-xe300:-:::::::* Remediation No remediation found in references.
gl-inet gl-ar750s firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ar750s_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ar750s	All versions
CPE cpe:2.3:h:gl-inet:gl-ar750s:-:::::::* Remediation No remediation found in references.
gl-inet gl-ar750 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ar750_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ar750	All versions
CPE cpe:2.3:h:gl-inet:gl-ar750:-:::::::* Remediation No remediation found in references.
gl-inet gl-mifi firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mifi_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mifi	All versions
CPE cpe:2.3:h:gl-inet:gl-mifi:-:::::::* Remediation No remediation found in references.
gl-inet gl-mt300n-v2 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-mt300n-v2	All versions
CPE cpe:2.3:h:gl-inet:gl-mt300n-v2:-:::::::* Remediation No remediation found in references.
gl-inet gl-ar300m firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-ar300m_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-ar300m	All versions
CPE cpe:2.3:h:gl-inet:gl-ar300m:-:::::::* Remediation No remediation found in references.
gl-inet gl-usb150 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:gl-usb150_firmware:::::::: Remediation No remediation found in references.
gl-inet gl-usb150	All versions
CPE cpe:2.3:h:gl-inet:gl-usb150:-:::::::* Remediation No remediation found in references.
gl-inet microuter-n300 firmware	< 3.216
CPE cpe:2.3:o:gl-inet:microuter-n300_firmware:::::::: Remediation No remediation found in references.
gl-inet microuter-n300	All versions
CPE cpe:2.3:h:gl-inet:microuter-n300:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jan 29, 2025	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 16, 2023	Initial Analysis	[email protected]

CVE-2023-31474 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation