CVE-2023-50919

critical · 9.8

An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.

9.8

CVSS

47.8%

EPSS (exploit prob.)

99th

EPSS percentile

2024-01-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
gl-inet	gl-ax1800_firmware	4.3.7
gl-inet	gl-ax1800_firmware	4.4.6
gl-inet	gl-ax1800	all versions
gl-inet	gl-axt1800_firmware	4.3.7
gl-inet	gl-axt1800_firmware	4.4.6
gl-inet	gl-axt1800	all versions
gl-inet	gl-mt3000_firmware	4.3.7
gl-inet	gl-mt3000_firmware	4.4.6
gl-inet	gl-mt3000	all versions
gl-inet	gl-mt2500_firmware	4.3.7
gl-inet	gl-mt2500_firmware	4.4.6
gl-inet	gl-mt2500	all versions
gl-inet	gl-mt6000_firmware	4.3.7
gl-inet	gl-mt6000_firmware	4.4.6
gl-inet	gl-mt6000	all versions
gl-inet	gl-mt1300_firmware	4.3.7
gl-inet	gl-mt1300_firmware	4.4.6
gl-inet	gl-mt1300	all versions
gl-inet	gl-mt300n-v2_firmware	4.3.7
gl-inet	gl-mt300n-v2_firmware	4.4.6
gl-inet	gl-mt300n-v2	all versions
gl-inet	gl-ar750s_firmware	4.3.7
gl-inet	gl-ar750s_firmware	4.4.6
gl-inet	gl-ar750s	all versions
gl-inet	gl-ar750_firmware	4.3.7
gl-inet	gl-ar750_firmware	4.4.6
gl-inet	gl-ar750	all versions
gl-inet	gl-ar300m_firmware	4.3.7
gl-inet	gl-ar300m_firmware	4.4.6
gl-inet	gl-ar300m	all versions
gl-inet	gl-b1300_firmware	4.3.7
gl-inet	gl-b1300_firmware	4.4.6
gl-inet	gl-b1300	all versions
gl-inet	gl-a1300_firmware	4.3.7
gl-inet	gl-a1300_firmware	4.4.6
gl-inet	gl-a1300	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-50919