Insecure Communication Protocol in GL.iNET GL-AR750S-Ext Firmware
CVE-2023-33620

5.9MEDIUM

Key Information:

Vendor

Gl-inet

Status
Gl-ar750s Firmware
Vendor
CVE Published:
13 June 2023

What is CVE-2023-33620?

The GL.iNET GL-AR750S-Ext device running firmware version 3.215 is susceptible to attacks due to the use of an insecure communication protocol. This vulnerability enables attackers to conduct man-in-the-middle attacks, allowing them to eavesdrop on confidential communications. Users should be aware of the risks associated with this security flaw and consider updating to a secure version or mitigating the exposure through alternative measures.

References

https://justinapplegate.me/2023/glinet-CVE-2023-33620/

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.