CVE-2023-46455

Summary

CVE-2023-46455 is a newly disclosed vulnerability affecting GL.iNET GL-AR300M routers running firmware version 4.3.7. This issue allows an attacker to conduct a path traversal attack on the OpenVPN client file upload functionality, enabling them to write arbitrary files on the system. Successful exploitation could result in unauthorized modification or execution of critical system files, potentially leading to compromised router functionality or unauthorized network access. Users are advised to update their firmware to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.