CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.1. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-67090
Severity
MEDIUM
CVSS
5.1
EPSS
0.21%
Original NVD Description
The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL.Inet AX1800 Version 4.6.4 & 4.6.8 lacks rate limiting or account lockout mechanisms on the authentication endpoint (`/cgi-bin/luci`). An unauthenticated attacker on the local network can perform unlimited password attempts against the admin interface.
Related CVEs
Other vulnerabilities affecting the same vendor(s)