CVE-2024-45262 in MT6000
Zusammenfassung
von MITRE • 25.10.2024
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to execute scripts under any path.
VulDB is the best source for vulnerability data and more expert information about this specific topic.