CVE-2023-33621
Last modified
CVE-2023-33621 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gl-Inet | Gl-Ar750s Firmware | 3.215 |
References
- https://justinapplegate.me/2023/glinet-CVE-2023-33621/Exploit, Third Party Advisory
- https://justinapplegate.me/2023/glinet-CVE-2023-33621/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33621?
How severe is CVE-2023-33621?
How do I fix CVE-2023-33621?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33604Imperial CMS v7.5 was discovered to contain an arbitrary fil…9.1
- CVE-2023-3361A flaw was found in Red Hat OpenShift Data Science. When exp…7.5
- CVE-2023-33613axTLS v2.1.5 was discovered to contain a heap buffer overflo…5.5
- CVE-2023-33617An OS Command Injection vulnerability in Parks Fiberlink 210…7.2
- CVE-2023-3362An information disclosure issue in GitLab CE/EE affecting al…5.3
- CVE-2023-33620GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure proto…5.9
- CVE-2023-33622Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-33623Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-33624Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-33625D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 wa…9.8
- CVE-2023-33626D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 wa…9.8
- CVE-2023-33627H3C Magic R300 version R300-2100MV100R004 was discovered to …7.2
Are you affected by CVE-2023-33621?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST