CVE-2025-2850

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Apr 26, 2025
Source updated: Apr 28, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

GL.iNet GL-A1300 Slate Plus Download Interface improper authorization

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been rated as problematic. This issue affects some unknown processing of the component Download Interface. The manipulation leads to improper authorization. It is recommended to upgrade the affected component.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

GL-A1300 Slate Plus

Vendor: GL.iNet
Product: GL-A1300 Slate Plus
Platforms: Unknown
Default status: Unknown

GL-A1300 Slate Plus · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-AR300M16 Shadow

Vendor: GL.iNet
Product: GL-AR300M16 Shadow
Platforms: Unknown
Default status: Unknown

GL-AR300M16 Shadow · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-AR300M Shadow

Vendor: GL.iNet
Product: GL-AR300M Shadow
Platforms: Unknown
Default status: Unknown

GL-AR300M Shadow · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-AR750 Creta

Vendor: GL.iNet
Product: GL-AR750 Creta
Platforms: Unknown
Default status: Unknown

GL-AR750 Creta · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-AR750S-EXT Slate

Vendor: GL.iNet
Product: GL-AR750S-EXT Slate
Platforms: Unknown
Default status: Unknown

GL-AR750S-EXT Slate · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-AX1800 Flint

Vendor: GL.iNet
Product: GL-AX1800 Flint
Platforms: Unknown
Default status: Unknown

GL-AX1800 Flint · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-AXT1800 Slate AX

Vendor: GL.iNet
Product: GL-AXT1800 Slate AX
Platforms: Unknown
Default status: Unknown

GL-AXT1800 Slate AX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-B1300 Convexa-B

Vendor: GL.iNet
Product: GL-B1300 Convexa-B
Platforms: Unknown
Default status: Unknown

GL-B1300 Convexa-B · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-B3000 Marble

Vendor: GL.iNet
Product: GL-B3000 Marble
Platforms: Unknown
Default status: Unknown

GL-B3000 Marble · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-BE3600 Slate 7

Vendor: GL.iNet
Product: GL-BE3600 Slate 7
Platforms: Unknown
Default status: Unknown

GL-BE3600 Slate 7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-E750

Vendor: GL.iNet
Product: GL-E750
Platforms: Unknown
Default status: Unknown

GL-E750 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-E750V2 Mudi

Vendor: GL.iNet
Product: GL-E750V2 Mudi
Platforms: Unknown
Default status: Unknown

GL-E750V2 Mudi · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-MT300N-V2 Mango

Vendor: GL.iNet
Product: GL-MT300N-V2 Mango
Platforms: Unknown
Default status: Unknown

GL-MT300N-V2 Mango · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-MT1300 Beryl

Vendor: GL.iNet
Product: GL-MT1300 Beryl
Platforms: Unknown
Default status: Unknown

GL-MT1300 Beryl · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-MT2500 Brume 2

Vendor: GL.iNet
Product: GL-MT2500 Brume 2
Platforms: Unknown
Default status: Unknown

GL-MT2500 Brume 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-MT3000 Beryl AX

Vendor: GL.iNet
Product: GL-MT3000 Beryl AX
Platforms: Unknown
Default status: Unknown

GL-MT3000 Beryl AX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-MT6000 Flint 2

Vendor: GL.iNet
Product: GL-MT6000 Flint 2
Platforms: Unknown
Default status: Unknown

GL-MT6000 Flint 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-SFT1200 Opal

Vendor: GL.iNet
Product: GL-SFT1200 Opal
Platforms: Unknown
Default status: Unknown

GL-SFT1200 Opal · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-X300B Collie

Vendor: GL.iNet
Product: GL-X300B Collie
Platforms: Unknown
Default status: Unknown

GL-X300B Collie · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-X750 Spitz

Vendor: GL.iNet
Product: GL-X750 Spitz
Platforms: Unknown
Default status: Unknown

GL-X750 Spitz · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-X3000 Spitz AX

Vendor: GL.iNet
Product: GL-X3000 Spitz AX
Platforms: Unknown
Default status: Unknown

GL-X3000 Spitz AX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-XE300 Puli

Vendor: GL.iNet
Product: GL-XE300 Puli
Platforms: Unknown
Default status: Unknown

GL-XE300 Puli · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

GL-XE3000 Puli AX

Vendor: GL.iNet
Product: GL-XE3000 Puli AX
Platforms: Unknown
Default status: Unknown

GL-XE3000 Puli AX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.x	`affected`	Unavailable	Unavailable	Unavailable	None listed