mt2500 firmware vulnerabilities and fixes

Recent CVEs affecting mt2500 firmware, with upgrade or downgrade steps. 10 tracked.

Also searched as: mt2500firmware.

mt2500 firmware has 10 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-10-24. Highest priority: CVE-2024-39226 (score 69/100).

• CVE-2024-45263 HIGH 8.8 MITIGATE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45262 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45261 HIGH 8.0 UPGRADE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45260 HIGH 8.0 MITIGATE MITIGATE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45259 MEDIUM 6.5 MITIGATE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-39229 MEDIUM 5.3 MITIGATE MITIGATE An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/
• CVE-2024-39228 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-39227 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-39226 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-39225 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18

FAQ

How do I fix mt2500 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mt2500 firmware being exploited right now?

None of the tracked mt2500 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mt2500 firmware CVE should I patch first?

CVE-2024-39226 currently ranks highest (69/100): GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18.

RSS feed for mt2500 firmware · ← Back to latest CVEs