CVE-2024-45263

highpriority · track · 0EPSS 0.003 · 19 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.27% (19th) EPSS

CVSS 8.8 · high

Is it mine?

22 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to information leakage, enabling complete control.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 2.8 · impact 5.9

v3.18.1highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-434US

affected products (22)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
gl-inet a1300 firmware= 4.5.17nvdUScpe:2.3:o:gl-inet:a1300_firmware:*:*:*:*:*:*:*:*
gl-inet ar300m firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:ar300m_firmware:*:*:*:*:*:*:*:*
gl-inet ar300m16 firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:ar300m16_firmware:*:*:*:*:*:*:*:*
gl-inet ar750 firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:ar750_firmware:*:*:*:*:*:*:*:*
gl-inet ar750s firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:ar750s_firmware:*:*:*:*:*:*:*:*
gl-inet ax1800 firmware4.6.2 → 4.6.4nvdUScpe:2.3:o:gl-inet:ax1800_firmware:*:*:*:*:*:*:*:*
gl-inet axt1800 firmware4.6.2 → 4.6.4nvdUScpe:2.3:o:gl-inet:axt1800_firmware:*:*:*:*:*:*:*:*
gl-inet b1300 firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:b1300_firmware:*:*:*:*:*:*:*:*
gl-inet b3000 firmware= 4.5.18nvdUScpe:2.3:o:gl-inet:b3000_firmware:*:*:*:*:*:*:*:*
gl-inet e750 firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:e750_firmware:*:*:*:*:*:*:*:*
gl-inet mt1300 firmware= 4.3.18nvdUScpe:2.3:o:gl-inet:mt1300_firmware:*:*:*:*:*:*:*:*
gl-inet mt2500 firmware4.6.2 → 4.6.4nvdUScpe:2.3:o:gl-inet:mt2500_firmware:*:*:*:*:*:*:*:*
gl-inet mt3000 firmware4.6.2 → 4.6.4nvdUScpe:2.3:o:gl-inet:mt3000_firmware:*:*:*:*:*:*:*:*
gl-inet mt300n-v2 firmware= 4.3.17nvdUScpe:2.3:o:gl-inet:mt300n-v2_firmware:*:*:*:*:*:*:*:*
gl-inet mt6000 firmware= 4.6.2nvdUScpe:2.3:o:gl-inet:mt6000_firmware:*:*:*:*:*:*:*:*
gl-inet sft1200 firmware= 4.3.18nvdUScpe:2.3:o:gl-inet:sft1200_firmware:*:*:*:*:*:*:*:*
gl-inet x3000 firmware= 4.4.9nvdUScpe:2.3:o:gl-inet:x3000_firmware:*:*:*:*:*:*:*:*
gl-inet x300b firmware= 4.5.17nvdUScpe:2.3:o:gl-inet:x300b_firmware:*:*:*:*:*:*:*:*
gl-inet x750 firmware= 4.3.18nvdUScpe:2.3:o:gl-inet:x750_firmware:*:*:*:*:*:*:*:*

showing 20 of 22

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2024-10-24modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan