CVE-2024-39229

gl-inet mt6000 firmware, gl-inet a1300 firmware, gl-inet x300b firmware +25 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-39229

Katalog CVE

CVSS 5.3 · Medium EPSS 0,18%

Kerentanan Improper Enforcement of Message Integrity During Transmission in a Communication Channel pada gl-inet mt6000 firmware, gl-inet a1300 firmware +26 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4, and B2200/MV1000/MV1000W/USB150/N300/SF1200 v3.216 allows attackers to intercept communications via a man-in-the-middle attack when DDNS clients are reporting data to the server.

Rincian

Terbit di NVD
6 Agustus 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
EPSS (30 hari)
0,18% peluang dieksploitasi; lebih tinggi dari 6,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
gl-inet mt6000 firmware Versi 4.5.8
gl-inet a1300 firmware Versi 4.5.16
gl-inet x300b firmware Versi 4.5.16
gl-inet ax1800 firmware Versi 4.5.16
gl-inet axt1800 firmware Versi 4.5.16
gl-inet mt2500 firmware Versi 4.5.16
gl-inet mt3000 firmware Versi 4.5.16
gl-inet x3000 firmware Versi 4.4.8
gl-inet xe3000 firmware Versi 4.4.8
gl-inet xe300 firmware Versi 4.3.16
gl-inet e750 firmware Versi 4.3.12
gl-inet x750 firmware Versi 4.3.11
gl-inet sft1200 firmware Versi 4.3.11
gl-inet ar300m firmware Versi 4.3.11
gl-inet ar300m16 firmware Versi 4.3.11
gl-inet ar750 firmware Versi 4.3.11
gl-inet ar750s firmware Versi 4.3.11
gl-inet b1300 firmware Versi 4.3.11
gl-inet mt1300 firmware Versi 4.3.11
gl-inet mt300n-v2 firmware Versi 4.3.11
gl-inet ap1300 firmware Versi 3.217
gl-inet b2200 firmware Versi 3.216
gl-inet mv1000 firmware Versi 3.216
gl-inet mv1000w firmware Versi 3.216
gl-inet usb150 firmware Versi 3.216
gl-inet sf1200 firmware Versi 3.216
gl-inet n300 firmware Versi 3.216
gl-inet s1300 firmware Versi 3.216

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.