Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
证书验证不恰当
Vulnerability Title
GL-Inet GL-AXT1800 安全漏洞
Vulnerability Description
GL-Inet GL-AXT1800是中国GL-Inet公司的一款WiFi6无线路由器。 GL-Inet GL-AXT1800 4.7.0版本存在安全漏洞，该漏洞源于OTA更新功能存在固件降级漏洞，可能导致中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A