What’s Vulnerable › Vulnerabilities

CVE-2023-31471

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-10 · updated 2026-06-17

Description

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install software from the filesystem, the package list, or a URL.

Affected products

• GL-iNet Gl-A1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ap1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ap1300Lte Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar300M Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar750 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar750S Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ax1800 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Axt1800 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-B1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-B2200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-E750 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mifi Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt2500 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt2500A Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt3000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt300N-V2 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mv1000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mv1000W Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S10 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S20 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Sf1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Sft1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Usb150 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X3000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X300B Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X750 Firmware: before 3.216 — fixed in 3.216

How to fix

Upgrade to a fixed version: GL-iNet Gl-A1300 Firmware 3.216; GL-iNet Gl-Ap1300 Firmware 3.216; GL-iNet Gl-Ap1300Lte Firmware 3.216; GL-iNet Gl-Ar300M Firmware 3.216; GL-iNet Gl-Ar750 Firmware 3.216; GL-iNet Gl-Ar750S Firmware 3.216; GL-iNet Gl-Ax1800 Firmware 3.216; GL-iNet Gl-Axt1800 Firmware 3.216; GL-iNet Gl-B1300 Firmware 3.216; GL-iNet Gl-B2200 Firmware 3.216; GL-iNet Gl-E750 Firmware 3.216; GL-iNet Gl-Mifi Firmware 3.216. Check the vendor advisory for mitigations.

References

• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Abuse_of_Functionality_leads_to_RCE.md
• https://www.gl-inet.com
• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Abuse_of_Functionality_leads_to_RCE.md
• https://www.gl-inet.com

Get alerted when CVE-2023-31471 or the next vulnerability affects your stack