CVE-2023-46456

Critical

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload…

mitre·CWE-74·Published 2023-12-12

CVSS

9.8

EPSS

0.25

KEV

Exploits

cve.orgen

152 chars

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

NVDen

152 chars

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

En los routers GL.iNET GL-AR300M con firmware 3.216 es posible inyectar comandos de shell arbitrarios a través de la funcionalidad de carga de archivos del cliente OpenVPN.

CVE-2023-46456

CVSS metrics across sources