File System Accessibility Flaw in GL-INet Beryl AX Router
CVE-2025-25685

7.5HIGH

Key Information:

Vendor

GL-INet

Status
Beryl AX GL-MT3000
Vendor
CVE Published:
17 March 2025

What is CVE-2025-25685?

A vulnerability exists in GL-INet Beryl AX GL-MT3000 v4.7.0, enabling attackers to exploit symbolic links on an external drive utilized as a Samba share. This flaw allows unauthorized downloading of arbitrary files from the device’s file system, creating a significant risk for sensitive data exposure and unauthorized access.

References

https://medium.com/@tfortinsec/multiple-path-traversal-vu...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.