Gl-Inet Gl-Ar300m-Lite
4 CVEs affecting Gl-Inet Gl-Ar300m-Lite. Latest disclosed: 2019-03-21. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-6275 | High | 8.8 | 2019-03-21 | Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code. |
CVE-2019-6274 | High | 8.8 | 2019-03-21 | Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via di… |
CVE-2019-6272 | High | 8.8 | 2019-03-21 | Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code. |
CVE-2019-6273 | Medium | 6.5 | 2019-03-21 | download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files. |