What’s Vulnerable › Vulnerabilities

CVE-2023-31475

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-11 · updated 2026-06-17
• Weakness: CWE-120

Description

An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.

Affected products

• GL-iNet Gl-A1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ap1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ap1300Lte Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar300M Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar750 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ar750S Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Ax1800 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Axt1800 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-B1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-B2200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-E750 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mifi Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt2500 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt2500A Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt3000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mt300N-V2 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mv1000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Mv1000W Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S10 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S1300 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-S20 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Sf1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Sft1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-Usb150 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X1200 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X3000 Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X300B Firmware: before 3.216 — fixed in 3.216
• GL-iNet Gl-X750 Firmware: before 3.216 — fixed in 3.216

How to fix

Upgrade to a fixed version: GL-iNet Gl-A1300 Firmware 3.216; GL-iNet Gl-Ap1300 Firmware 3.216; GL-iNet Gl-Ap1300Lte Firmware 3.216; GL-iNet Gl-Ar300M Firmware 3.216; GL-iNet Gl-Ar750 Firmware 3.216; GL-iNet Gl-Ar750S Firmware 3.216; GL-iNet Gl-Ax1800 Firmware 3.216; GL-iNet Gl-Axt1800 Firmware 3.216; GL-iNet Gl-B1300 Firmware 3.216; GL-iNet Gl-B2200 Firmware 3.216; GL-iNet Gl-E750 Firmware 3.216; GL-iNet Gl-Mifi Firmware 3.216. Check the vendor advisory for mitigations.

References

• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Buffer_Overflow.md
• https://justinapplegate.me/2023/glinet-CVE-2023-31475/
• https://www.gl-inet.com
• https://github.com/gl-inet/CVE-issues/blob/main/3.215/Buffer_Overflow.md
• https://justinapplegate.me/2023/glinet-CVE-2023-31475/
• https://www.gl-inet.com

Get alerted when CVE-2023-31475 or the next vulnerability affects your stack