Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-27356 Details

Description

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md	CVE	Third Party Advisory
https://gl-inet.com	CVE	Product
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md	[email protected]	Third Party Advisory
https://gl-inet.com	[email protected]	Product

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	CISA-ADP

Affected Products

Product	Versions
gl-inet mt6000 firmware	4.5.5
CPE cpe:2.3:o:gl-inet:mt6000_firmware:4.5.5:::::::* Remediation No remediation found in references.
gl-inet mt6000	All versions
CPE cpe:2.3:h:gl-inet:mt6000:-:::::::* Remediation No remediation found in references.
gl-inet xe3000 firmware	4.4.4
CPE cpe:2.3:o:gl-inet:xe3000_firmware:4.4.4:::::::* Remediation No remediation found in references.
gl-inet xe3000	All versions
CPE cpe:2.3:h:gl-inet:xe3000:-:::::::* Remediation No remediation found in references.
gl-inet x3000 firmware	4.4.5
CPE cpe:2.3:o:gl-inet:x3000_firmware:4.4.5:::::::* Remediation No remediation found in references.
gl-inet x3000	All versions
CPE cpe:2.3:h:gl-inet:x3000:-:::::::* Remediation No remediation found in references.
gl-inet mt3000 firmware	4.5.0
CPE cpe:2.3:o:gl-inet:mt3000_firmware:4.5.0:::::::* Remediation No remediation found in references.
gl-inet mt3000	All versions
CPE cpe:2.3:h:gl-inet:mt3000:-:::::::* Remediation No remediation found in references.
gl-inet mt2500 firmware	4.5.0
CPE cpe:2.3:o:gl-inet:mt2500_firmware:4.5.0:::::::* Remediation No remediation found in references.
gl-inet mt2500	All versions
CPE cpe:2.3:h:gl-inet:mt2500:-:::::::* Remediation No remediation found in references.
gl-inet axt1800 firmware	4.5.0
CPE cpe:2.3:o:gl-inet:axt1800_firmware:4.5.0:::::::* Remediation No remediation found in references.
gl-inet axt1800	All versions
CPE cpe:2.3:h:gl-inet:axt1800:-:::::::* Remediation No remediation found in references.
gl-inet ax1800 firmware	4.5.0
CPE cpe:2.3:o:gl-inet:ax1800_firmware:4.5.0:::::::* Remediation No remediation found in references.
gl-inet ax1800	All versions
CPE cpe:2.3:h:gl-inet:ax1800:-:::::::* Remediation No remediation found in references.
gl-inet a1300 firmware	4.5.0
CPE cpe:2.3:o:gl-inet:a1300_firmware:4.5.0:::::::* Remediation No remediation found in references.
gl-inet a1300	All versions
CPE cpe:2.3:h:gl-inet:a1300:-:::::::* Remediation No remediation found in references.
gl-inet s200 firmware	4.1.4-0300
CPE cpe:2.3:o:gl-inet:s200_firmware:4.1.4-0300:::::::* Remediation No remediation found in references.
gl-inet s200	All versions
CPE cpe:2.3:h:gl-inet:s200:-:::::::* Remediation No remediation found in references.
gl-inet x750 firmware	4.3.7
CPE cpe:2.3:o:gl-inet:x750_firmware:4.3.7:::::::* Remediation No remediation found in references.
gl-inet x750	All versions
CPE cpe:2.3:h:gl-inet:x750:-:::::::* Remediation No remediation found in references.
gl-inet sft1200 firmware	4.37
CPE cpe:2.3:o:gl-inet:sft1200_firmware:4.37:::::::* Remediation No remediation found in references.
gl-inet sft1200	All versions
CPE cpe:2.3:h:gl-inet:sft1200:-:::::::* Remediation No remediation found in references.
gl-inet xe300 firmware	4.3.7
CPE cpe:2.3:o:gl-inet:xe300_firmware:4.3.7:::::::* Remediation No remediation found in references.
gl-inet xe300	All versions
CPE cpe:2.3:h:gl-inet:xe300:-:::::::* Remediation No remediation found in references.
gl-inet mt1300 firmware	4.3.10
CPE cpe:2.3:o:gl-inet:mt1300_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet mt1300	All versions
CPE cpe:2.3:h:gl-inet:mt1300:-:::::::* Remediation No remediation found in references.
gl-inet ar750 firmware	4.3.10
CPE cpe:2.3:o:gl-inet:ar750_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet ar750	All versions
CPE cpe:2.3:h:gl-inet:ar750:-:::::::* Remediation No remediation found in references.
gl-inet ar750s firmware	4.3.10
CPE cpe:2.3:o:gl-inet:ar750s_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet ar750s	All versions
CPE cpe:2.3:h:gl-inet:ar750s:-:::::::* Remediation No remediation found in references.
gl-inet ar300m firmware	4.3.10
CPE cpe:2.3:o:gl-inet:ar300m_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet ar300m	All versions
CPE cpe:2.3:h:gl-inet:ar300m:-:::::::* Remediation No remediation found in references.
gl-inet ar300m16 firmware	4.3.10
CPE cpe:2.3:o:gl-inet:ar300m16_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet ar300m16	All versions
CPE cpe:2.3:h:gl-inet:ar300m16:-:::::::* Remediation No remediation found in references.
gl-inet b1300 firmware	4.3.10
CPE cpe:2.3:o:gl-inet:b1300_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet b1300	All versions
CPE cpe:2.3:h:gl-inet:b1300:-:::::::* Remediation No remediation found in references.
gl-inet mt300n-v2 firmware	4.3.10
CPE cpe:2.3:o:gl-inet:mt300n-v2_firmware:4.3.10:::::::* Remediation No remediation found in references.
gl-inet mt300n-v2	All versions
CPE cpe:2.3:h:gl-inet:mt300n-v2:-:::::::* Remediation No remediation found in references.
gl-inet x300b firmware	3.217
CPE cpe:2.3:o:gl-inet:x300b_firmware:3.217:::::::* Remediation No remediation found in references.
gl-inet x300b	All versions
CPE cpe:2.3:h:gl-inet:x300b:-:::::::* Remediation No remediation found in references.
gl-inet s1300 firmware	3.216
CPE cpe:2.3:o:gl-inet:s1300_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet s1300	All versions
CPE cpe:2.3:h:gl-inet:s1300:-:::::::* Remediation No remediation found in references.
gl-inet sf1200 firmware	3.216
CPE cpe:2.3:o:gl-inet:sf1200_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet sf1200	All versions
CPE cpe:2.3:h:gl-inet:sf1200:-:::::::* Remediation No remediation found in references.
gl-inet mv1000 firmware	3.216
CPE cpe:2.3:o:gl-inet:mv1000_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet mv1000	All versions
CPE cpe:2.3:h:gl-inet:mv1000:-:::::::* Remediation No remediation found in references.
gl-inet n300 firmware	3.216
CPE cpe:2.3:o:gl-inet:n300_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet n300	All versions
CPE cpe:2.3:h:gl-inet:n300:-:::::::* Remediation No remediation found in references.
gl-inet b2200 firmware	3.216
CPE cpe:2.3:o:gl-inet:b2200_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet b2200	All versions
CPE cpe:2.3:h:gl-inet:b2200:-:::::::* Remediation No remediation found in references.
gl-inet x1200 firmware	3.203
CPE cpe:2.3:o:gl-inet:x1200_firmware:3.203:::::::* Remediation No remediation found in references.
gl-inet x1200	All versions
CPE cpe:2.3:h:gl-inet:x1200:-:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Sep 18, 2025	Initial Analysis	[email protected]
Mar 24, 2025	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Aug 7, 2024	CVE Modified	CISA-ADP
May 14, 2024	CVE Modified	[email protected]
Feb 27, 2024	New CVE Received	[email protected]

CVE-2024-27356 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation