CVE-2023-31475 : An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer ove

An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.

Published 2023-05-11 11:15:09

Updated 2023-06-12 20:15:12

Source MITRE

View at NVD, CVE.org

Vulnerability category: Overflow

Exploit prediction scoring system (EPSS) score for CVE-2023-31475

EPSS FAQ

0.20%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 57 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-31475

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-31475

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-31475

Products affected by CVE-2023-31475

Gl-inet » Gl-mt300n-v2 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt300n-v2 » Version: N/A
Gl-inet » Gl-ax1800 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ax1800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ax1800 » Version: N/A
Gl-inet » Gl-mt3000 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt3000 » Version: N/A
Gl-inet » Gl-s20 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s20_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s20 » Version: N/A
Gl-inet » Gl-x3000 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x3000 » Version: N/A
Gl-inet » Gl-mt2500 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt2500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt2500 » Version: N/A
Gl-inet » Gl-mt2500a Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt2500a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt2500a » Version: N/A
Gl-inet » Gl-axt1800 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-axt1800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-axt1800 » Version: N/A
Gl-inet » Gl-a1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-a1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-a1300 » Version: N/A
Gl-inet » Gl-sft1200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-sft1200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-sft1200 » Version: N/A
Gl-inet » Gl-mt1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt1300 » Version: N/A
Gl-inet » Gl-e750 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-e750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-e750 » Version: N/A
Gl-inet » Gl-mv1000 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mv1000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mv1000 » Version: N/A
Gl-inet » Gl-mv1000w Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mv1000w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mv1000w » Version: N/A
Gl-inet » Gl-s10 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s10 » Version: N/A
Gl-inet » Gl-s200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s200 » Version: N/A
Gl-inet » Gl-s1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s1300 » Version: N/A
Gl-inet » Gl-sf1200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-sf1200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-sf1200 » Version: N/A
Gl-inet » Gl-b1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-b1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-b1300 » Version: N/A
Gl-inet » Gl-b2200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-b2200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-b2200 » Version: N/A
Gl-inet » Gl-ap1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ap1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ap1300 » Version: N/A
Gl-inet » Gl-ap1300lte Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ap1300lte_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ap1300lte » Version: N/A
Gl-inet » Gl-x1200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x1200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x1200 » Version: N/A
Gl-inet » Gl-x750 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x750 » Version: N/A
Gl-inet » Gl-x300b Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x300b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x300b » Version: N/A
Gl-inet » Gl-xe300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-xe300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-xe300 » Version: N/A
Gl-inet » Gl-ar750s Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ar750s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ar750s » Version: N/A
Gl-inet » Gl-ar750 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ar750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ar750 » Version: N/A
Gl-inet » Gl-mifi Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mifi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mifi » Version: N/A
Gl-inet » Gl-ar300m Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ar300m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ar300m » Version: N/A
Gl-inet » Gl-usb150 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-usb150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-usb150 » Version: N/A
Gl-inet » Microuter-n300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:microuter-n300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Microuter-n300 » Version: N/A

Vulnerability Details : CVE-2023-31475

Exploit prediction scoring system (EPSS) score for CVE-2023-31475

CVSS scores for CVE-2023-31475

CWE ids for CVE-2023-31475

References for CVE-2023-31475

Products affected by CVE-2023-31475