GL-iNet XE3000 DDNS denial of service

Summaryinfo

A vulnerability was found in GL-iNet A1300, AR300M, AR300M16, AR750, AR750S, AX1800, AXT1800, B1300, MT1300, MT2500, MT3000, MT300N-V2, MT6000, S200, SFT1200, X3000, X750, XE300 and XE3000. It has been rated as problematic. Impacted is an unknown function of the component DDNS Handler. This manipulation causes denial of service. This vulnerability appears as CVE-2024-28077. There is no available exploit.

Detailsinfo

A vulnerability has been found in GL-iNet A1300, AR300M, AR300M16, AR750, AR750S, AX1800, AXT1800, B1300, MT1300, MT2500, MT3000, MT300N-V2, MT6000, S200, SFT1200, X3000, X750, XE300 and XE3000 and classified as problematic. Affected by this vulnerability is an unknown function of the component DDNS Handler. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability. The summary by CVE is:

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usernames and special characters (such as half parentheses or square brackets), one can call the login interface and cause the session-management program to crash, resulting in customers being unable to log into their devices. This affects MT6000 4.5.6, XE3000 4.4.5, X3000 4.4.6, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-V2 4.3.10, and XE300 4.3.16.

This vulnerability is known as CVE-2024-28077 since 03/03/2024. The exploitation appears to be difficult. The technical details are unknown and an exploit is not publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-25244). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• GL-iNet

Name

• A1300
• AR300M
• AR300M16
• AR750
• AR750S
• AX1800
• AXT1800
• B1300
• MT300N-V2
• MT1300
• MT2500
• MT3000
• MT6000
• S200
• SFT1200
• X750
• X3000
• XE300
• XE3000

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion