CVE-2024-27356 in gl-inet mt6000 firmware
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.
Affected software: gl-inet mt6000 firmware, gl-inet xe3000 firmware, gl-inet x3000 firmware, gl-inet mt3000 firmware, gl-inet mt2500 firmware, gl-inet axt1800 firmware, gl-inet ax1800 firmware, gl-inet a1300 firmware, gl-inet s200 firmware, gl-inet x750 firmware
Scores
- CVSS: 7.5 (high)
- EPSS: 23.91% chance of exploitation in the next 30 days
- CISA KEV: Not listed
- Published: 2024-02-27
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.