CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the Logread Lua RPC Plugin of GL.iNet GL-MT3000 devices running versions up to 4.4.5, specifically affecting the logread.set_config function. This flaw allows attackers to manipulate the record_size argument, potentially leading to unauthorized command execution. Organizations using these devices should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument record_size causes command injection. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.