CVE-2023-38324
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
| Vendor | n/a |
| Product | n/a |
| Published | Nov 17, 2023 |
| Last Updated | Nov 26, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new unknown vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
openwrt.org: https://openwrt.org/docs/guide-user/services/captive-portal/opennds github.com: https://github.com/openNDS/openNDS/releases/tag/v10.1.2 github.com: https://github.com/openNDS/openNDS/blob/master/ChangeLog forescout.com: https://www.forescout.com/resources/sierra21-vulnerabilities cwe.mitre.org: https://cwe.mitre.org/data/definitions/1390.html github.com: https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80 source.sierrawireless.com: https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs