Shell Injection Vulnerability in GL.iNet Routers

CVE-2023-50445

What is CVE-2023-50445?

A shell injection vulnerability has been identified in various GL.iNet router models, which allows local attackers to execute arbitrary code. The flaw is present in the logread module's get_system_log and get_crash_log functions, as well as in the upgrade_online function of the upgrade module. Attackers can exploit this vulnerability to gain unauthorized access, potentially compromising the router's functionality and the network it connects to.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-50445
Created by Rapid7

References