VulnerabilityModified
CVE-2023-33621
The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
MEDIUM 5.9EPSS 0.71%
Does this matter?
Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own.
Description
GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.71% probability · 52th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-294
- Affected
- gl-inet/gl-ar750s firmware
- Source
- cve@mitre.org
References
- https://justinapplegate.me/2023/glinet-CVE-2023-33621/Exploit, Third Party Advisory
- https://justinapplegate.me/2023/glinet-CVE-2023-33621/Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.