Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-39229 Details

Description

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

CNA: CISA-ADPCVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/DDNS%20data%20is%20not%20encrypted.md	[email protected]	ExploitThird Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]
CWE-924	Improper Enforcement of Message Integrity During Transmission in a Communication Channel	CISA-ADP

Affected Products

Product	Versions
gl-inet mt6000 firmware	4.5.8
CPE cpe:2.3:o:gl-inet:mt6000_firmware:4.5.8:::::::* Remediation No remediation found in references.
gl-inet mt6000	All versions
CPE cpe:2.3:h:gl-inet:mt6000:-:::::::* Remediation No remediation found in references.
gl-inet a1300 firmware	4.5.16
CPE cpe:2.3:o:gl-inet:a1300_firmware:4.5.16:::::::* Remediation No remediation found in references.
gl-inet a1300	All versions
CPE cpe:2.3:h:gl-inet:a1300:-:::::::* Remediation No remediation found in references.
gl-inet x300b firmware	4.5.16
CPE cpe:2.3:o:gl-inet:x300b_firmware:4.5.16:::::::* Remediation No remediation found in references.
gl-inet x300b	All versions
CPE cpe:2.3:h:gl-inet:x300b:-:::::::* Remediation No remediation found in references.
gl-inet ax1800 firmware	4.5.16
CPE cpe:2.3:o:gl-inet:ax1800_firmware:4.5.16:::::::* Remediation No remediation found in references.
gl-inet ax1800	All versions
CPE cpe:2.3:h:gl-inet:ax1800:-:::::::* Remediation No remediation found in references.
gl-inet axt1800 firmware	4.5.16
CPE cpe:2.3:o:gl-inet:axt1800_firmware:4.5.16:::::::* Remediation No remediation found in references.
gl-inet axt1800	All versions
CPE cpe:2.3:h:gl-inet:axt1800:-:::::::* Remediation No remediation found in references.
gl-inet mt2500 firmware	4.5.16
CPE cpe:2.3:o:gl-inet:mt2500_firmware:4.5.16:::::::* Remediation No remediation found in references.
gl-inet mt2500	All versions
CPE cpe:2.3:h:gl-inet:mt2500:-:::::::* Remediation No remediation found in references.
gl-inet mt3000 firmware	4.5.16
CPE cpe:2.3:o:gl-inet:mt3000_firmware:4.5.16:::::::* Remediation No remediation found in references.
gl-inet mt3000	All versions
CPE cpe:2.3:h:gl-inet:mt3000:-:::::::* Remediation No remediation found in references.
gl-inet x3000 firmware	4.4.8
CPE cpe:2.3:o:gl-inet:x3000_firmware:4.4.8:::::::* Remediation No remediation found in references.
gl-inet x3000	All versions
CPE cpe:2.3:h:gl-inet:x3000:-:::::::* Remediation No remediation found in references.
gl-inet xe3000 firmware	4.4.8
CPE cpe:2.3:o:gl-inet:xe3000_firmware:4.4.8:::::::* Remediation No remediation found in references.
gl-inet xe3000	All versions
CPE cpe:2.3:h:gl-inet:xe3000:-:::::::* Remediation No remediation found in references.
gl-inet xe300 firmware	4.3.16
CPE cpe:2.3:o:gl-inet:xe300_firmware:4.3.16:::::::* Remediation No remediation found in references.
gl-inet xe300	All versions
CPE cpe:2.3:h:gl-inet:xe300:-:::::::* Remediation No remediation found in references.
gl-inet e750 firmware	4.3.12
CPE cpe:2.3:o:gl-inet:e750_firmware:4.3.12:::::::* Remediation No remediation found in references.
gl-inet e750	All versions
CPE cpe:2.3:h:gl-inet:e750:-:::::::* Remediation No remediation found in references.
gl-inet x750 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:x750_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet x750	All versions
CPE cpe:2.3:h:gl-inet:x750:-:::::::* Remediation No remediation found in references.
gl-inet sft1200 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:sft1200_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet sft1200	All versions
CPE cpe:2.3:h:gl-inet:sft1200:-:::::::* Remediation No remediation found in references.
gl-inet ar300m firmware	4.3.11
CPE cpe:2.3:o:gl-inet:ar300m_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet ar300m	All versions
CPE cpe:2.3:h:gl-inet:ar300m:-:::::::* Remediation No remediation found in references.
gl-inet ar300m16 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:ar300m16_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet ar300m16	All versions
CPE cpe:2.3:h:gl-inet:ar300m16:-:::::::* Remediation No remediation found in references.
gl-inet ar750 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:ar750_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet ar750	All versions
CPE cpe:2.3:h:gl-inet:ar750:-:::::::* Remediation No remediation found in references.
gl-inet ar750s firmware	4.3.11
CPE cpe:2.3:o:gl-inet:ar750s_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet ar750s	All versions
CPE cpe:2.3:h:gl-inet:ar750s:-:::::::* Remediation No remediation found in references.
gl-inet b1300 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:b1300_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet b1300	All versions
CPE cpe:2.3:h:gl-inet:b1300:-:::::::* Remediation No remediation found in references.
gl-inet mt1300 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:mt1300_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet mt1300	All versions
CPE cpe:2.3:h:gl-inet:mt1300:-:::::::* Remediation No remediation found in references.
gl-inet mt300n-v2 firmware	4.3.11
CPE cpe:2.3:o:gl-inet:mt300n-v2_firmware:4.3.11:::::::* Remediation No remediation found in references.
gl-inet mt300n-v2	All versions
CPE cpe:2.3:h:gl-inet:mt300n-v2:-:::::::* Remediation No remediation found in references.
gl-inet ap1300 firmware	3.217
CPE cpe:2.3:o:gl-inet:ap1300_firmware:3.217:::::::* Remediation No remediation found in references.
gl-inet ap1300	All versions
CPE cpe:2.3:h:gl-inet:ap1300:-:::::::* Remediation No remediation found in references.
gl-inet b2200 firmware	3.216
CPE cpe:2.3:o:gl-inet:b2200_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet b2200	All versions
CPE cpe:2.3:h:gl-inet:b2200:-:::::::* Remediation No remediation found in references.
gl-inet mv1000 firmware	3.216
CPE cpe:2.3:o:gl-inet:mv1000_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet mv1000	All versions
CPE cpe:2.3:h:gl-inet:mv1000:-:::::::* Remediation No remediation found in references.
gl-inet mv1000w firmware	3.216
CPE cpe:2.3:o:gl-inet:mv1000w_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet mv1000w	All versions
CPE cpe:2.3:h:gl-inet:mv1000w:-:::::::* Remediation No remediation found in references.
gl-inet usb150 firmware	3.216
CPE cpe:2.3:o:gl-inet:usb150_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet usb150	All versions
CPE cpe:2.3:h:gl-inet:usb150:-:::::::* Remediation No remediation found in references.
gl-inet sf1200 firmware	3.216
CPE cpe:2.3:o:gl-inet:sf1200_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet sf1200	All versions
CPE cpe:2.3:h:gl-inet:sf1200:-:::::::* Remediation No remediation found in references.
gl-inet n300 firmware	3.216
CPE cpe:2.3:o:gl-inet:n300_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet n300	All versions
CPE cpe:2.3:h:gl-inet:n300:-:::::::* Remediation No remediation found in references.
gl-inet s1300 firmware	3.216
CPE cpe:2.3:o:gl-inet:s1300_firmware:3.216:::::::* Remediation No remediation found in references.
gl-inet s1300	All versions
CPE cpe:2.3:h:gl-inet:s1300:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CISA-ADP
Aug 15, 2024	CVE Modified	[email protected]
Aug 12, 2024	Initial Analysis	[email protected]
Aug 6, 2024	New CVE Received	[email protected]

CVE-2024-39229 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation