CVE-2023-29778

Name of the Vulnerable Software and Affected Versions GL.iNET MT3000 version 4.1.0 Release 2

Description The issue is related to OS Command Injection, which can be exploited via the /usr/lib/oui-httpd/rpc/logread endpoint. This allows for potential execution of system commands, posing a security risk.

Recommendations For GL.iNET MT3000 version 4.1.0 Release 2, consider restricting access to the /usr/lib/oui-httpd/rpc/logread endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.