Lucene search
PRIOn knowledge basePRION:CVE-2023-33621HistoryJun 13, 2023 - 4:15 p.m.
Authentication flaw
2023-06-1316:15:00
PRIOn knowledge base
www.prio-n.com
2
authentication
flaw
gl-ar750s-ext
firmware
openvpn
server
config
token
get request
browser history
access logs
attackers
session replay
GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gl-ar750s_firmware | eq | 3.215 |
Related
cve
cve
CVE-2023-33621
2023-06-13 16:15:13
cvelist
cvelist
CVE-2023-33621
2023-06-13 00:00:00
nvd
nvd
CVE-2023-33621
2023-06-13 16:15:13