CVE-2023-38324
CVE-2023-38324 is a medium-severity vulnerability in Opennds Captive Portal with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 3.x base score 5.3)
- EPSS exploit prediction: 1% (48th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Opennds Captive Portal
- Published:
- Last modified:
Description
An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
Frequently asked questions
- What is CVE-2023-38324?
- An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
- How severe is CVE-2023-38324?
- CVE-2023-38324 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
- Is CVE-2023-38324 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (48th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-38324?
- CVE-2023-38324 affects Opennds Captive Portal. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-38324?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-38324 published?
- CVE-2023-38324 was published on 2023-11-17 and last updated on 2026-06-17.
References
- https://cwe.mitre.org/data/definitions/1390.html
- https://github.com/openNDS/openNDS/blob/master/ChangeLog
- https://github.com/openNDS/openNDS/releases/tag/v10.1.2
- https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80
- https://openwrt.org/docs/guide-user/services/captive-portal/opennds
- https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
- https://www.forescout.com/resources/sierra21-vulnerabilities
Affected products (1)
- cpe:2.3:a:opennds:captive_portal:*:*:*:*:*:*:*:*
More vulnerabilities in Opennds Captive Portal
- CVE-2023-38316 — Critical (CVSS 9.8): An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled,…
- CVE-2023-38322 — High (CVSS 7.5): An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference…
- CVE-2023-38320 — High (CVSS 7.5): An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer…
- CVE-2023-38315 — High (CVSS 7.5): An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer…
- CVE-2023-38313 — High (CVSS 7.5): An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer dereference that can…
- CVE-2023-38314 — Medium (CVSS 6.5): An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in…