CVE-2024-27356: Gl-Inet a1300 Firmware

High severity, CVSS 7.5. EPSS: 23.9% chance of exploitation in the next 30 days.

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.

Affected products

• Gl-Inet a1300 Firmware: version 4.5.0 only
• Gl-Inet AR300M16 Firmware: version 4.3.10 only
• Gl-Inet AR300M Firmware: version 4.3.10 only
• Gl-Inet AR750 Firmware: version 4.3.10 only
• Gl-Inet AR750S Firmware: version 4.3.10 only
• Gl-Inet AX1800 Firmware: version 4.5.0 only
• Gl-Inet AXT1800 Firmware: version 4.5.0 only
• Gl-Inet b1300 Firmware: version 4.3.10 only
• Gl-Inet b2200 Firmware: version 3.216 only
• Gl-Inet MT1300 Firmware: version 4.3.10 only
• Gl-Inet MT2500 Firmware: version 4.5.0 only
• Gl-Inet MT3000 Firmware: version 4.5.0 only
• Gl-Inet MT300N-v2 Firmware: version 4.3.10 only
• Gl-Inet MT6000 Firmware: version 4.5.5 only
• Gl-Inet MV1000 Firmware: version 3.216 only
• Gl-Inet n300 Firmware: version 3.216 only
• Gl-Inet s1300 Firmware: version 3.216 only
• Gl-Inet s200 Firmware: version 4.1.4-0300 only
• Gl-Inet SF1200 Firmware: version 3.216 only
• Gl-Inet SFT1200 Firmware: version 4.37 only
• Gl-Inet x1200 Firmware: version 3.203 only
• Gl-Inet x3000 Firmware: version 4.4.5 only
• Gl-Inet x300b Firmware: version 3.217 only
• Gl-Inet x750 Firmware: version 4.3.7 only
• Gl-Inet XE3000 Firmware: version 4.4.4 only
• and 1 more

Published 2024-02-27. Last modified 2026-06-17.