CyberRota Analysis
AI-GeneratedThe GL.iNet GL-MT3000 devices running versions up to 4.4.5 are vulnerable due to a command injection flaw in the Logread Lua RPC plugin, specifically in the logread.get_system_log function. This vulnerability allows remote attackers to manipulate arguments and execute arbitrary commands on the affected devices. Organizations using these devices should prioritize patching or mitigating this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.