CVE-2023-38315

概要

参考情報

• openNDS/openNDS release v10.1.2 · Release Notes
• openwrt/routing commit 0b19771
• source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4

captive portal のその他の脆弱性

• CVE-2023-38324中 5.3An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is us…
• CVE-2023-38322高 7.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with…
• CVE-2023-38320高 7.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be trig…
• CVE-2023-38316緊急 9.8An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute…
• CVE-2023-38314中 6.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthenticated() that can be…