A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file /cgi-bin/glc of the compo…

A command injection vulnerability was identified in GL.iNet GL-MT3000 router firmware versions up to 4.4.5. The flaw exists in the ovpn-client.get_recommend_config function within the /cgi-bin/glc file of the ovpn-client.so Native Plugin component. An attacker can manipulate the Hostname argument to inject arbitrary commands. The attack can be performed remotely without physical access to the device. A public exploit has already been disclosed and is available for use. The vendor was notified early in the disclosure process and confirmed the vulnerability's existence. This poses a significant risk to users of affected GL.iNet devices running the vulnerable firmware version.