7.5
HIGH
CVE-2024-28077
"GL-iNet Devices Denial-of-Service and Information Disclosure Vulnerability"
Description

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usernames and special characters (such as half parentheses or square brackets), one can call the login interface and cause the session-management program to crash, resulting in customers being unable to log into their devices. This affects MT6000 4.5.6, XE3000 4.4.5, X3000 4.4.6, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-V2 4.3.10, and XE300 4.3.16.

INFO

Published Date :

Aug. 26, 2024, 8:15 p.m.

Last Modified :

Sept. 5, 2024, 6:29 p.m.

Remotely Exploitable :

Yes !

Impact Score :

3.6

Exploitability Score :

3.9
Affected Products

The following products are affected by CVE-2024-28077 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Gl-inet mt6000_firmware
2 Gl-inet mt6000
3 Gl-inet a1300_firmware
4 Gl-inet a1300
5 Gl-inet ax1800_firmware
6 Gl-inet ax1800
7 Gl-inet axt1800_firmware
8 Gl-inet axt1800
9 Gl-inet mt2500_firmware
10 Gl-inet mt2500
11 Gl-inet mt3000_firmware
12 Gl-inet mt3000
13 Gl-inet x3000_firmware
14 Gl-inet x3000
15 Gl-inet xe3000_firmware
16 Gl-inet xe3000
17 Gl-inet xe300_firmware
18 Gl-inet xe300
19 Gl-inet x750_firmware
20 Gl-inet x750
21 Gl-inet sft1200_firmware
22 Gl-inet sft1200
23 Gl-inet ar300m_firmware
24 Gl-inet ar300m
25 Gl-inet ar300m16_firmware
26 Gl-inet ar300m16
27 Gl-inet ar750_firmware
28 Gl-inet ar750
29 Gl-inet ar750s_firmware
30 Gl-inet ar750s
31 Gl-inet b1300_firmware
32 Gl-inet b1300
33 Gl-inet mt1300_firmware
34 Gl-inet mt1300
35 Gl-inet mt300n-v2_firmware
36 Gl-inet mt300n-v2
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-28077.

URL Resource
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Denial%20of%20service.md Third Party Advisory
https://gl-inet.com Product

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-28077 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2024-28077 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Sep. 05, 2024

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Changed Reference Type https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Denial%20of%20service.md No Types Assigned https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Denial%20of%20service.md Third Party Advisory
    Changed Reference Type https://gl-inet.com No Types Assigned https://gl-inet.com Product
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:mt6000_firmware:4.5.6:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:mt6000:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:x3000_firmware:4.4.6:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:x3000:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:xe3000_firmware:4.4.4:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:xe3000:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:a1300_firmware:4.5.0:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:a1300:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:ax1800_firmware:4.5.0:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:ax1800:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:axt1800_firmware:4.5.0:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:axt1800:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:mt2500_firmware:4.5.0:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:mt2500:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:mt3000_firmware:4.5.0:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:mt3000:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:xe300_firmware:4.3.16:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:xe300:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:x750_firmware:4.3.7:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:x750:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:sft1200_firmware:4.3.7:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:sft1200:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:ar300m_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:ar300m:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:ar300m16_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:ar300m16:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:ar750_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:ar750:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:ar750s_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:ar750s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:b1300_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:b1300:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:mt1300_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:mt1300:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:gl-inet:mt300n-v2_firmware:4.3.10:*:*:*:*:*:*:* OR cpe:2.3:h:gl-inet:mt300n-v2:-:*:*:*:*:*:*:*
  • CVE Received by [email protected]

    Aug. 26, 2024

    Action Type Old Value New Value
    Added Description A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usernames and special characters (such as half parentheses or square brackets), one can call the login interface and cause the session-management program to crash, resulting in customers being unable to log into their devices. This affects MT6000 4.5.6, XE3000 4.4.5, X3000 4.4.6, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-V2 4.3.10, and XE300 4.3.16.
    Added Reference MITRE https://gl-inet.com [No types assigned]
    Added Reference MITRE https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Denial%20of%20service.md [No types assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-28077 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-28077 weaknesses.

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability