{"id":"CVE-2024-39229","aliases":["EUVD-2024-38323","GHSA-42jh-6qqc-g99m"],"status":"published","title":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4...","description":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00177,"percentile":0.07363,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-924"],"published":"2024-08-06T00:00:00Z","modified":"2026-06-17T07:41:33Z","products":[{"vendor":"gl-inet","product":"a1300_firmware"},{"vendor":"gl-inet","product":"ap1300_firmware"},{"vendor":"gl-inet","product":"ar300m16_firmware"},{"vendor":"gl-inet","product":"ar300m_firmware"},{"vendor":"gl-inet","product":"ar750_firmware"},{"vendor":"gl-inet","product":"ar750s_firmware"},{"vendor":"gl-inet","product":"ax1800_firmware"},{"vendor":"gl-inet","product":"axt1800_firmware"},{"vendor":"gl-inet","product":"b1300_firmware"},{"vendor":"gl-inet","product":"b2200_firmware"},{"vendor":"gl-inet","product":"e750_firmware"},{"vendor":"gl-inet","product":"mt1300_firmware"},{"vendor":"gl-inet","product":"mt2500_firmware"},{"vendor":"gl-inet","product":"mt3000_firmware"},{"vendor":"gl-inet","product":"mt300n-v2_firmware"},{"vendor":"gl-inet","product":"mt6000_firmware"},{"vendor":"gl-inet","product":"mv1000_firmware"},{"vendor":"gl-inet","product":"mv1000w_firmware"},{"vendor":"gl-inet","product":"n300_firmware"},{"vendor":"gl-inet","product":"s1300_firmware"},{"vendor":"gl-inet","product":"sf1200_firmware"},{"vendor":"gl-inet","product":"sft1200_firmware"},{"vendor":"gl-inet","product":"usb150_firmware"},{"vendor":"gl-inet","product":"x3000_firmware"},{"vendor":"gl-inet","product":"x300b_firmware"},{"vendor":"gl-inet","product":"x750_firmware"},{"vendor":"gl-inet","product":"xe3000_firmware"},{"vendor":"gl-inet","product":"xe300_firmware"}],"references":[{"url":"https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/DDNS%20data%20is%20not%20encrypted.md","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39229"},{"url":"http://ar750ar750sar300mar300m16mt300n-v2b1300mt1300sft1200x750.com"},{"url":"https://github.com/advisories/GHSA-42jh-6qqc-g99m"}],"sources":{"cve":[{"id":"CVE-2024-39229","description":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.","status":"published","published":"2024-08-06T00:00:00Z","modified":"2024-11-21T18:43:08.245Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-924"],"updated_at":"2026-11-02T14:34:19.28149Z"}],"euvd":[{"id":"EUVD-2024-38323","description":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.","status":"published","published":"2024-08-06T00:00:00Z","modified":"2024-11-21T18:43:08Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:52.521149Z"}],"ghsa":[{"id":"GHSA-42jh-6qqc-g99m","title":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4...","description":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.","status":"published","published":"2024-08-06T18:30:57Z","modified":"2024-11-21T21:34:37Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-924"],"updated_at":"2026-11-02T14:58:54.226272Z"}],"nvd":[{"id":"CVE-2024-39229","description":"An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.","status":"published","published":"2024-08-06T17:15:54.027Z","modified":"2026-06-17T07:41:33.727Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-924"],"updated_at":"2026-11-02T14:10:17.832118Z"}]}}