← CVE Intelligence

CVE-2025-44018

GL-Inet / GL-AXT1800 PUBLISHED

Description (CNA)

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
GL-Inet / GL-AXT1800affected 4.7.0

CWE

CWE-295

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.