Deviceways

Travel router

GL.iNet GL-AR300M-Lite

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1
Get OpenWrt firmware Release listed · 25.12.6
v1
Open hardware record
Original project github.com

Recorded configuration: 16 MB flash; 128 MB RAM

First installation
Sysupgrade
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

gl.inet gl-ar300m-lite — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1

OpenWrt · v1

OpenWrt · v1 — Source documentation (openwrt.org)

Installation routes recorded
Sysupgrade
Recovery routes recorded
U-Boot web recovery
Availability recorded by source
Available 2024

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

GL.iNet GL-AR300M-Lite

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.

CVE-2019-6275

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.

46179 — GL.iNet GL-AR300M-Lite (exploit-db.com) ↗
CVE published

GL.iNet GL-AR300M-Lite

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences.

CVE-2019-6274

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences.

46179 — GL.iNet GL-AR300M-Lite (exploit-db.com) ↗
CVE published

GL.iNet GL-AR300M-Lite

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

CVE-2019-6273

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

46179 — GL.iNet GL-AR300M-Lite (exploit-db.com) ↗
CVE published

GL.iNet GL-AR300M-Lite

Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.

CVE-2019-6272

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.

46179 — GL.iNet GL-AR300M-Lite (exploit-db.com) ↗
Check more security advisories for this device · CVE.org