CVE-2025-2811 is a medium-severity vulnerability affecting numerous GL.iNet router models, including the Slate Plus, Shadow, Creta, Flint, and Beryl series, among others. The vulnerability, categorized as inefficient regular expression complexity (CWE-1333, CWE-400), resides within an unknown component of the API. An authenticated attacker on the adjacent network can exploit this with low complexity, leading to a high impact on availability (denial of service). There is currently no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| GL.INet | GL-A1300 Slate Plus | 4.xCNA affected | |
| GL.INet | GL-AR300M Shadow | 4.xCNA affected | |
| GL.INet | GL-AR300M16 Shadow | 4.xCNA affected | |
| GL.INet | GL-AR750 Creta | 4.xCNA affected | |
| GL.INet | GL-AR750S-EXT Slate | 4.xCNA affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.