OpenWRT <= 24.10.4 DoS Vulnerability

OpenWRT is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openwrt:openwrt";...

CVE-2023-30312

CVE-2023-30312 affects OpenWrt 18.06, 19.07, 21.02, 22.03 and newer builds. The issue is an off-path TCP session hijack vulnerability caused by nf_conntrack_tcp_no_window_check being true by default, enabling denial of service and impersonation of both client and server (e.g., FTP access, finance...