What’s Vulnerable › Vulnerabilities

CVE-2023-31474

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-09 · updated 2026-06-17

Description

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.

Affected products

• GL-iNet Gl-A1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ap1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ap1300Lte Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar300M Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar750 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar750S Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ax1800 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Axt1800 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-B1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-B2200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-E750 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mifi Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt2500 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt2500A Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt3000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt300N-V2 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mv1000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mv1000W Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S10 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S20 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Sf1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Sft1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Usb150 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X3000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X300B Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X750 Firmware: before 3.216 — fixed in 3.216

How to fix

Upgrade to a fixed version: GL-iNet Gl-A1300 Firmware 3.216; GL-iNet Gl-Ap1300 Firmware 3.216; GL-iNet Gl-Ap1300Lte Firmware 3.216; GL-iNet Gl-Ar300M Firmware 3.216; GL-iNet Gl-Ar750 Firmware 3.216; GL-iNet Gl-Ar750S Firmware 3.216; GL-iNet Gl-Ax1800 Firmware 3.216; GL-iNet Gl-Axt1800 Firmware 3.216; GL-iNet Gl-B1300 Firmware 3.216; GL-iNet Gl-B2200 Firmware 3.216; GL-iNet Gl-E750 Firmware 3.216; GL-iNet Gl-Mifi Firmware 3.216. Check the vendor advisory for mitigations.

References

• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md
• https://www.gl-inet.com
• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md
• https://www.gl-inet.com

Get alerted when CVE-2023-31474 or the next vulnerability affects your stack