Skip to content
COOEY

EXPOSURES › CVE-2023-29778

CVE-2023-29778

CRITICAL
DETAIL
SourceNVD · cve Published2023-05-02 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-29778 ↗
⚡ RCE SHAME 50/100 rce

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

▸ RECOMMENDED ACTION  Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED
gl-inet · vendorgl-mt3000 · productgl-mt3000 firmware · product
DESCRIPTION

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.