Lucene search

[email protected]CVE-2023-50920

HistoryJan 12, 2024 - 8:15 a.m.

CVE-2023-50920

2024-01-1208:15:43

CWE-384

[email protected]

web.nvd.nist.gov

gl.inet

cve-2023-50920

authentication bypass

session identifier

access control

security vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legitimate users or perform unauthorized actions. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.

Affected configurations

NVD

Node

gl-inetgl-ax1800Match-

AND

gl-inetgl-ax1800_firmwareMatch4.3.7

gl-inetgl-ax1800_firmwareMatch4.4.6

Node

gl-inetgl-axt1800Match-

AND

gl-inetgl-axt1800_firmwareMatch4.3.7

gl-inetgl-axt1800_firmwareMatch4.4.6

Node

gl-inetgl-mt3000Match-

AND

gl-inetgl-mt3000_firmwareMatch4.3.7

gl-inetgl-mt3000_firmwareMatch4.4.6

Node

gl-inetgl-mt2500Match-

AND

gl-inetgl-mt2500_firmwareMatch4.3.7

gl-inetgl-mt2500_firmwareMatch4.4.6

Node

gl-inetgl-mt6000Match-

AND

gl-inetgl-mt6000_firmwareMatch4.3.7

gl-inetgl-mt6000_firmwareMatch4.4.6

Node

gl-inetgl-mt1300Match-

AND

gl-inetgl-mt1300_firmwareMatch4.3.7

gl-inetgl-mt1300_firmwareMatch4.4.6

Node

gl-inetgl-mt300n-v2_firmwareMatch4.3.7

gl-inetgl-mt300n-v2_firmwareMatch4.4.6

AND

gl-inetgl-mt300n-v2Match-

Node

gl-inetgl-ar750s_firmwareMatch4.3.7

gl-inetgl-ar750s_firmwareMatch4.4.6

AND

gl-inetgl-ar750sMatch-

Node

gl-inetgl-ar750_firmwareMatch4.3.7

gl-inetgl-ar750_firmwareMatch4.4.6

AND

gl-inetgl-ar750Match-

Node

gl-inetgl-ar300m_firmwareMatch4.3.7

gl-inetgl-ar300m_firmwareMatch4.4.6

AND

gl-inetgl-ar300mMatch-

Node

gl-inetgl-b1300_firmwareMatch4.3.7

gl-inetgl-b1300_firmwareMatch4.4.6

AND

gl-inetgl-b1300Match-

Node

gl-inetgl-a1300_firmwareMatch4.3.7

gl-inetgl-a1300_firmwareMatch4.4.6

AND

gl-inetgl-a1300Match-

CPENameOperatorVersion
gl-inet:gl-ax1800_firmwaregl-inet gl-ax1800 firmwareeq4.3.7
gl-inet:gl-ax1800_firmwaregl-inet gl-ax1800 firmwareeq4.4.6

CPE	Name	Operator	Version
gl-inet:gl-ax1800_firmware	gl-inet gl-ax1800 firmware	eq	4.3.7
gl-inet:gl-ax1800_firmware	gl-inet gl-ax1800 firmware	eq	4.4.6

References

github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass-seesion-ID.md

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-50920

cvelist1 nvd1 prion1