vendor:
GLiNet Router
by:
DZONERZY Security Research
6.1
CVSS
HIGH
Authentication Bypass
287
CWE
Product Name: GLiNet Router
Affected Version From: 4.x
Affected Version To: Latest version before patch
Patch Exists: NO
Related CWE: CVE-2023-46453
CPE: h:gli_net:router
Platforms Tested:
2023
GLiNet Router Authentication Bypass
CVE-2023-46453 is an authentication bypass vulnerability in GLiNet routers with firmware versions 4.x and above. By exploiting this vulnerability, an attacker can bypass authentication mechanisms and access the router's web interface. The issue arises from improper authentication checks in the /usr/sbin/gl-ngx-session file.
Mitigation:
To mitigate this vulnerability, it is recommended to update the router firmware to a version that addresses this issue. Additionally, restricting access to the router's web interface to trusted networks can help reduce the risk of exploitation.
