Lucene search
HistoryJun 13, 2023 - 5:15 p.m.
CVE-2023-33620
cve-2023-33620
gl.inet
firmware
v3.215
insecure protocol
eavesdropping
man-in-the-middle attack
nvd
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
5.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.1%
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack.
Affected configurations
Node
gl-inetgl-ar750s_firmwareMatch3.215
gl-inetgl-ar750sMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| gl-inet:gl-ar750s_firmware | gl-inet gl-ar750s firmware | eq | 3.215 |
Related
prion
prion
Design/Logic Flaw
2023-06-13 17:15:00
cvelist
cvelist
CVE-2023-33620
2023-06-13 00:00:00
nvd
nvd
CVE-2023-33620
2023-06-13 17:15:14
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
5.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.1%
Related for CVE-2023-33620