CVE-2023-31478

HIGH 7.5EPSS 29.7%

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 29.70% chance of exploitation in the next 30 days, 98th percentile
Nuclei: high
Published: 2023-05-09
Updated: 2025-01-29

Proof-of-concept exploits (1)

gl-inet/CVE-issues/blob/main/3.215/SSID_Key_Disclosure.md

Nuclei templates (1)

projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31478.yaml

References

Related