CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the Firewall-management RPC of GL.iNet BE9300 and MT6000 devices running version 4.8.x, allowing remote attackers to manipulate dest_port/dest_ip parameters. This could lead to unauthorized command execution on the affected devices. Users of these products should prioritize upgrading to version 4.9.0 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument dest_port/dest_ip leads to os command injection. The attack may be initiated remotely. Upgrading to version 4.9.0 is able to resolve this issue. The affected component should be upgraded. The vendor explains: "After our investigation, we have confirmed that the vulnerability described (...) does indeed exist."