Product: GL.iNet Beryl 7 (GL-MT3600BE)
Chipset: MediaTek MT7993
Firmware: 4.9.0
Severity: Medium — no security impact, but leaves an undocumented, unmanaged SSID broadcasting after user believes it was removed
Summary:
After creating and then deleting an MLO Wi-Fi profile ("Beryl") via the web UI, the profile disappeared from the interface — but the SSID continued broadcasting on both 2.4GHz and 5GHz radios.
Root cause (confirmed via SSH/uci):
Deleting the MLO profile only removes the higher-level mld0 wrapper object and the UI's internal reference to it. It does not cascade-delete the underlying per-radio wifi-iface sections (wlanmld2g, wlanmld5g) that actually broadcast the SSID. These orphaned sections remained active in /etc/config/wireless and kept transmitting after the UI showed no trace of the network.
Steps to reproduce:
-
Create an MLO Wi-Fi network (e.g. named "Beryl") spanning 2.4GHz + 5GHz via WIRELESS → MLO tab
-
Delete the MLO profile via the UI
-
Run
uci show wireless | grep ssidvia SSH — the SSID is still present inwlanmld2g/wlanmld5gsections along with themld0object -
Confirm via
iwinfo— SSID is still actively broadcasting on-air, despite not being visible anywhere in the UI
Workaround:
Manual cleanup via SSH:
uci delete wireless.wlanmld2g
uci delete wireless.wlanmld5g
uci delete wireless.mld0
uci commit wireless
wifi reload
Suggested fix: UI delete action for MLO profiles should cascade-delete all associated per-band wifi-iface sections, not just the mld0 wrapper/internal reference.