CVE-2025-25684

Summary

CVE-2025-25684 is a vulnerability affecting GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers can exploit this issue by crafting malicious POST requests to the /download path parameter. The lack of validation in the input allows the attacker to download arbitrary files from the device's file system, potentially leading to sensitive data exposure or unauthorized system access. This vulnerability poses a significant risk to the security and privacy of affected devices. Users are advised to apply the available patch or update as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.