CVE-2023-31478Gl-A1300 Firmware Vulnerability
An issue was discovered on GL.iNet devices before 3.216.
Published May 9, 2023 · Updated Jan 29, 2025
Key Facts
Patch immediately- CVE-2023-31478 is a high-severity vulnerability (CVSS 7.5 v3.1) affecting Gl-A1300 Firmware (Gl-Inet), Gl-Ap1300 Firmware (Gl-Inet), Gl-Ap1300lte Firmware (Gl-Inet) and 22 more products.
- It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Mar 31, 2025. Public exploit code is available.
- EPSS estimates a 30% probability of exploitation in the next 30 days.
- Fixed versions are available, including Gl-A1300 Firmware 3.216, Gl-Ap1300 Firmware 3.216, Gl-Ap1300lte Firmware 3.216.
- Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (30-day exploit likelihood)
30%
Higher than 98.1% of all scored CVEs
Exploit maturity
Exploited (KEV)
ATLAS score
49/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Mar 31, 2025
692 days after publication
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Exploited (KEV)
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
10
Reports of active use
Description
An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.
Known-Exploited Catalog Listings
| Catalog | Added | Remediation due | Ransomware use |
|---|---|---|---|
| CIRCL KEV | Mar 31, 2025 | n/a | Not reported |
| Industry KEV feed | Mar 31, 2025 | n/a | Not reported |
Affected Products
32 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Gl-A1300 FirmwareGl-Inet | See advisory | 3.216 |
| Gl-Ap1300 FirmwareGl-Inet | See advisory | 3.216 |
| Gl-Ap1300lte FirmwareGl-Inet | See advisory | 3.216 |
| Gl-Ar300m FirmwareGl-Inet | See advisory | 3.216 |
| Gl-Ar750 FirmwareGl-Inet | See advisory | 3.216 |
Patched Releases
Gl-A1300 Firmware
3.216
Gl-Ap1300 Firmware
3.216
Gl-Ap1300lte Firmware
3.216
Gl-Ar300m Firmware
3.216
Gl-Ar750 Firmware
3.216
Gl-Ar750s Firmware
3.216
Gl-Ax1800 Firmware
3.216
Gl-Axt1800 Firmware
3.216
Gl-B1300 Firmware
3.216
Gl-B2200 Firmware
3.216
Gl-E750 Firmware
3.216
Gl-Mifi Firmware
3.216
Gl-Mt1300 Firmware
3.216
Gl-Mt2500 Firmware
3.216
Gl-Mt2500a Firmware
3.216
Gl-Mt3000 Firmware
3.216
Gl-Mt300n-V2 Firmware
3.216
Gl-Mv1000 Firmware
3.216
Gl-Mv1000w Firmware
3.216
Gl-S10 Firmware
3.216
Gl-S1300 Firmware
3.216
Gl-S20 Firmware
3.216
Gl-S200 Firmware
3.216
Gl-Sf1200 Firmware
3.216
Gl-Sft1200 Firmware
3.216
Timeline
Publicly disclosed
May 9, 2023
Last updated
Jan 29, 2025
Added to CIRCL KEV
Mar 31, 2025
Added to Industry KEV feed
Mar 31, 2025
References
- exploitVulnCheck exploitation report
- exploitVulnCheck exploitation report
- exploitVulnCheck exploitation report
- exploitVulnCheck exploitation report
- exploitVulnCheck exploitation report
FAQ
Common Questions.
An issue was discovered on GL.iNet devices before 3.216.
Affected: Gl-A1300 Firmware (Gl-Inet); Gl-Ap1300 Firmware (Gl-Inet); Gl-Ap1300lte Firmware (Gl-Inet), among others. The full list is in the CVE brief.
It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Mar 31, 2025.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Gl-A1300 Firmware 3.216, Gl-Ap1300 Firmware 3.216, Gl-Ap1300lte Firmware 3.216.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Is CVE-2023-31478 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo