pentester.land· Oct 26, 2022· by Olivier Laflamme (@olivier_boschko)

GL.iNET GL-MT300N-V2 Router Vulnerabilities and Hardware Teardown

Target Program: GL.iNet

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#OS command injection#Arbitrary file read#Information disclosure#Account takeover#Stored XSS#Lack of rate limiting#Weak credentials#Password policy bypass

GL.iNET GL-MT300N-V2 Router Vulnerabilities and Hardware Teardown

More Writeups Like This

Technical Advisory – Multiple Vulnerabilities in PandoraFMS Enterprise

Technical Advisory – Multiple Vulnerabilities in Nagios XI

Vulnerabilities in Tenda's W15Ev2 AC1200 Router

Bug Hunting Journey of 2021