Authentication Bypass in GL.iNet Devices Impacting Multiple Versions

CVE-2023-50919

What is CVE-2023-50919?

An authentication bypass vulnerability exists in GL.iNet devices prior to version 4.5.0, allowing unauthorized access via NGINX using Lua string pattern matching. This issue impacts several models, including the A1300, AX1800, and others, potentially allowing attackers to execute commands without proper authentication. Administrators are urged to review affected device versions and consider immediate updates to mitigate this vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-50919
Created by Rapid7

References