CVE-2024-27356

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.5EPSS 24%

Published 2024-02-27Updated 2026-04-22

PoC

Vulnerability details

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNAmitre

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

NVD Analysis CVE Organization

Profile

CVSS

7.5

EPSS

24%

Published

2024-02-27

Updated

2026-04-22

CNA

mitre

Vendors

n/a

1 product

CPEs

cpe:2.3:a:gl-inet:mt1300:4.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:ar750:4.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:ar750s:4.3.10:*:*:*:*:*:*:*

cpe:2.3:h:gl.inet:MT6000:-:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:xe3000:4.4.4:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:x3000:4.4.5:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:mt3000:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:mt2500:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:axt1800:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:ax1800:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:a1300:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:s200:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:0300:*:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:x750:4.3.7:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:sft1200:4.3.7:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:xe300:4.3.7:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:ar3000m:4.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:ar3000m16:4.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:b1300:4.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:mt300nv2:4.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:x300b:3.217:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:s1300:3.216:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:sf1200:3.216:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:mv1000:3.216:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:n300:3.216:*:*:*:*:*:*:*

cpe:2.3:a:gl-inet:b2200:3.216:*:*:*:*:*:*:*

cpe:2.3:a:gl-i:x1200:3.203:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated