« Volver al listado

CVE-2025-2851

Estado: AplazadaAlta (8.6)—

A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Buffer overflow en RPC Handler (plugins.so) con AV:A, PR:L permite ejecución de código remota en red adyacente con privs. Impacto: ejecución arbitraria y escalada a root.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramPrivileged Account ManagementExecution PreventionDisable or Remove Feature or ProgramApplication Isolation and SandboxingExploit Protection

Tecnologías afectadas (23)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Gl-inet — Gl-a1300 Slate PlusAIGl-inet — Gl-ar300m16 ShadowAIGl-inet — Gl-ar300m ShadowAIGl-inet — Gl-ar750 CretaAIGl-inet — Gl-ar750s-ext SlateAIGl-inet — Gl-ax1800 FlintAIGl-inet — Gl-axt1800 Slate AXAIGl-inet — Gl-b1300 Convexa-bAIGl-inet — Gl-b3000 MarbleAIGl-inet — Gl-be3600 Slate 7AIGl-inet — Gl-e750AIGl-inet — Gl-e750v2 MudiAIGl-inet — Gl-mt1300 BerylAIGl-inet — Gl-mt2500 Brume 2AIGl-inet — Gl-mt3000 Beryl AXAIGl-inet — Gl-mt300n-v2 MangoAIGl-inet — Gl-mt6000 Flint 2AIGl-inet — Gl-sft1200 OpalAIGl-inet — Gl-x3000 Spitz AXAIGl-inet — Gl-x300b CollieAIGl-inet — Gl-x750 SpitzAIGl-inet — Gl-xe3000 Puli AXAIGl-inet — Gl-xe300 PuliAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-2851",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-2851",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-28T18:06:30.255746Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.7,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.1
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.6,
          "Automatable": "NOT_DEFINED",
          "attackVector": "ADJACENT",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "cna@vuldb.com",
      "affectedData": [
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-A1300 Slate Plus",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-AR300M16 Shadow",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-AR300M Shadow",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-AR750 Creta",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-AR750S-EXT Slate",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-AX1800 Flint",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-AXT1800 Slate AX",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-B1300 Convexa-B",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-B3000 Marble",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-BE3600 Slate 7",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-E750",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-E750V2 Mudi",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-MT300N-V2 Mango",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-MT1300 Beryl",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-MT2500 Brume 2",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-MT3000 Beryl AX",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-MT6000 Flint 2",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-SFT1200 Opal",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-X300B Collie",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-X750 Spitz",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-X3000 Spitz AX",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-XE300 Puli",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        },
        {
          "vendor": "GL.iNet",
          "modules": [
            "RPC Handler"
          ],
          "product": "GL-XE3000 Puli AX",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-04-26T08:15:15.113",
  "references": [
    {
      "url": "https://vuldb.com/?ctiid.306288",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/?id.306288",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://www.gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-apr-24-2025/",
      "source": "cna@vuldb.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cna@vuldb.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        },
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component."
    },
    {
      "lang": "es",
      "value": "Se ha encontrado una vulnerabilidad clasificada como crítica en GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli y GL-XE3000 Puli AX 4.x. Se ve afectada una función desconocida del archivo plugins.so del componente RPC Handler. Esta manipulación provoca un desbordamiento de búfer. Se recomienda actualizar el componente afectado."
    }
  ],
  "lastModified": "2026-06-17T09:07:43.950",
  "sourceIdentifier": "cna@vuldb.com"
}