download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote malicious users to download arbitrary files.
gl-inet gl-ar300m-lite_firmware 2.27