PT-2023-24408 · Gl.Inet · Gl-Ar750S-Ext

Published 2023-06-13 · Updated 2023-06-23 · CVE-2023-33621

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GL.iNET GL-AR750S-Ext firmware version 3.215

Description The issue concerns the insertion of the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. This token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.

Recommendations For GL.iNET GL-AR750S-Ext firmware version 3.215, consider clearing browser history and access logs regularly to minimize the risk of exploitation. As a temporary workaround, restrict access to the OpenVPN Server config file download feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2023-33621

Affected Products

Gl-Ar750S-Ext

References · 5

• 🔥 https://justinapplegate.me/2023/glinet-CVE-2023-33621 · Exploit
• https://osv.dev/vulnerability/CVE-2023-33621 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33621 · Security Note
• http://glinet.com · Note
• http://gl-ar750s-ext.com · Note