CVE-2024-39225

Summary

CVE-2024-39225 is a recently disclosed remote code execution (RCE) vulnerability affecting multiple GL-iNet products, including AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4. An attacker can exploit this vulnerability by sending maliciously crafted packets to the affected devices, potentially gaining full control over them. This puts the confidentiality, integrity, and availability of data processed or transmitted through the devices at risk. Users are strongly encouraged to update their devices to the latest software version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.