CVE-2023-38324

概要

参考情報

• cwe.mitre.org/data/definitions/1390.html
• openNDS/openNDS
• openNDS/openNDS release v10.1.2 · Release Notes
• openwrt/routing commit 0b19771
• openwrt.org/docs/guide-user/services/captive-portal/opennds
• source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4
• forescout.com/resources/sierra21-vulnerabilities

captive portal のその他の脆弱性

• CVE-2023-38322高 7.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with…
• CVE-2023-38320高 7.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be trig…
• CVE-2023-38316緊急 9.8An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute…
• CVE-2023-38315高 7.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be t…
• CVE-2023-38314中 6.5An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthenticated() that can be…