{"id":"CVE-2024-27356","aliases":["EUVD-2024-24560","GHSA-2m9v-3qff-5xxf"],"status":"published","title":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via...","description":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.23905,"percentile":0.9786,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2024-02-27T00:00:00Z","modified":"2026-06-17T07:19:43Z","exploits":[{"source":"exploitdb","id":"EDB-51942","title":"GL-iNet MT6000 4.5.5 - Arbitrary File Download","type":"remote","platform":"hardware","date":"2024-04-02","url":"https://www.exploit-db.com/exploits/51942"}],"products":[{"vendor":"gl-i","product":"x1200"},{"vendor":"gl-inet","product":"0300"},{"vendor":"gl-inet","product":"a1300"},{"vendor":"gl-inet","product":"a1300_firmware"},{"vendor":"gl-inet","product":"ar3000m"},{"vendor":"gl-inet","product":"ar3000m16"},{"vendor":"gl-inet","product":"ar300m16_firmware"},{"vendor":"gl-inet","product":"ar300m_firmware"},{"vendor":"gl-inet","product":"ar750"},{"vendor":"gl-inet","product":"ar750_firmware"},{"vendor":"gl-inet","product":"ar750s"},{"vendor":"gl-inet","product":"ar750s_firmware"},{"vendor":"gl-inet","product":"ax1800"},{"vendor":"gl-inet","product":"ax1800_firmware"},{"vendor":"gl-inet","product":"axt1800"},{"vendor":"gl-inet","product":"axt1800_firmware"},{"vendor":"gl-inet","product":"b1300"},{"vendor":"gl-inet","product":"b1300_firmware"},{"vendor":"gl-inet","product":"b2200"},{"vendor":"gl-inet","product":"b2200_firmware"},{"vendor":"gl-inet","product":"mt1300"},{"vendor":"gl-inet","product":"mt1300_firmware"},{"vendor":"gl-inet","product":"mt2500"},{"vendor":"gl-inet","product":"mt2500_firmware"},{"vendor":"gl-inet","product":"mt3000"},{"vendor":"gl-inet","product":"mt3000_firmware"},{"vendor":"gl-inet","product":"mt300n-v2_firmware"},{"vendor":"gl-inet","product":"mt300nv2"},{"vendor":"gl-inet","product":"mt6000_firmware"},{"vendor":"gl-inet","product":"mv1000"},{"vendor":"gl-inet","product":"mv1000_firmware"},{"vendor":"gl-inet","product":"n300"},{"vendor":"gl-inet","product":"n300_firmware"},{"vendor":"gl-inet","product":"s1300"},{"vendor":"gl-inet","product":"s1300_firmware"},{"vendor":"gl-inet","product":"s200"},{"vendor":"gl-inet","product":"s200_firmware"},{"vendor":"gl-inet","product":"sf1200"},{"vendor":"gl-inet","product":"sf1200_firmware"},{"vendor":"gl-inet","product":"sft1200"},{"vendor":"gl-inet","product":"sft1200_firmware"},{"vendor":"gl-inet","product":"x1200_firmware"},{"vendor":"gl-inet","product":"x3000"},{"vendor":"gl-inet","product":"x3000_firmware"},{"vendor":"gl-inet","product":"x300b"},{"vendor":"gl-inet","product":"x300b_firmware"},{"vendor":"gl-inet","product":"x750"},{"vendor":"gl-inet","product":"x750_firmware"},{"vendor":"gl-inet","product":"xe300"},{"vendor":"gl-inet","product":"xe3000"},{"vendor":"gl-inet","product":"xe3000_firmware"},{"vendor":"gl-inet","product":"xe300_firmware"},{"vendor":"gl.inet","product":"mt6000"}],"references":[{"url":"https://gl-inet.com","tags":["x_transferred","Product"]},{"url":"https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27356"},{"url":"https://github.com/advisories/GHSA-2m9v-3qff-5xxf"}],"sources":{"cve":[{"id":"CVE-2024-27356","description":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.","status":"published","published":"2024-02-27T00:00:00Z","modified":"2025-03-24T15:44:54.024Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:12.635756Z"}],"euvd":[{"id":"EUVD-2024-24560","description":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.","status":"published","published":"2024-02-27T00:00:00Z","modified":"2025-03-24T15:44:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:52:55.116366Z"}],"ghsa":[{"id":"GHSA-2m9v-3qff-5xxf","title":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via...","description":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.","status":"published","published":"2024-02-27T03:31:02Z","modified":"2025-03-24T18:31:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:00:25.317617Z"}],"nvd":[{"id":"CVE-2024-27356","description":"An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.","status":"published","published":"2024-02-27T01:15:07.197Z","modified":"2026-06-17T07:19:43.293Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:09:38.473056Z"}]}}