CVE-2019-6275: Gl-Inet Gl-AR300M-Lite Firmware

High severity, CVSS 8.8. EPSS: 12.5% chance of exploitation in the next 30 days.

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.

Affected products

• Gl-Inet Gl-AR300M-Lite Firmware: version 2.27 only

Published 2019-03-21. Last modified 2026-06-17.