Xe300
Monthly
Improper authorization in GL.iNet's eSIM LPA API allows adjacent-network unauthenticated attackers to bypass nginx proxy controls on six cellular router models, gaining unauthorized access to eSIM management functions. Affected devices include the E5800, E750, X2000, X3000, XE3000, and XE300 running firmware up to 20260707. The GitHub advisory title explicitly frames this as 'Unauthenticated access to eSIM LPA API via nginx proxy bypass,' indicating the authorization enforcement failure lies in how nginx proxies requests to the /sdk/v1 endpoint. No public exploit code or CISA KEV listing has been identified at time of analysis.
Improper authorization in GL.iNet's eSIM LPA API allows adjacent-network unauthenticated attackers to bypass nginx proxy controls on six cellular router models, gaining unauthorized access to eSIM management functions. Affected devices include the E5800, E750, X2000, X3000, XE3000, and XE300 running firmware up to 20260707. The GitHub advisory title explicitly frames this as 'Unauthenticated access to eSIM LPA API via nginx proxy bypass,' indicating the authorization enforcement failure lies in how nginx proxies requests to the /sdk/v1 endpoint. No public exploit code or CISA KEV listing has been identified at time of analysis.