CVE-2023-31478 : An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configurati

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.

Published 2023-05-09 23:15:10

Updated 2023-05-17 16:04:19

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-31478

EPSS FAQ

0.19%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-31478

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2023-31478

Products affected by CVE-2023-31478

Gl-inet » Gl-mt300n-v2 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt300n-v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt300n-v2 » Version: N/A
Gl-inet » Gl-ax1800 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ax1800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ax1800 » Version: N/A
Gl-inet » Gl-mt3000 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt3000 » Version: N/A
Gl-inet » Gl-s20 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s20_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s20 » Version: N/A
Gl-inet » Gl-x3000 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x3000 » Version: N/A
Gl-inet » Gl-mt2500 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt2500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt2500 » Version: N/A
Gl-inet » Gl-mt2500a Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt2500a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt2500a » Version: N/A
Gl-inet » Gl-axt1800 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-axt1800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-axt1800 » Version: N/A
Gl-inet » Gl-a1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-a1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-a1300 » Version: N/A
Gl-inet » Gl-sft1200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-sft1200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-sft1200 » Version: N/A
Gl-inet » Gl-mt1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mt1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mt1300 » Version: N/A
Gl-inet » Gl-e750 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-e750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-e750 » Version: N/A
Gl-inet » Gl-mv1000 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mv1000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mv1000 » Version: N/A
Gl-inet » Gl-mv1000w Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mv1000w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mv1000w » Version: N/A
Gl-inet » Gl-s10 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s10 » Version: N/A
Gl-inet » Gl-s200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s200 » Version: N/A
Gl-inet » Gl-s1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-s1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-s1300 » Version: N/A
Gl-inet » Gl-sf1200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-sf1200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-sf1200 » Version: N/A
Gl-inet » Gl-b1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-b1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-b1300 » Version: N/A
Gl-inet » Gl-b2200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-b2200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-b2200 » Version: N/A
Gl-inet » Gl-ap1300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ap1300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ap1300 » Version: N/A
Gl-inet » Gl-ap1300lte Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ap1300lte_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ap1300lte » Version: N/A
Gl-inet » Gl-x1200 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x1200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x1200 » Version: N/A
Gl-inet » Gl-x750 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x750 » Version: N/A
Gl-inet » Gl-x300b Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-x300b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-x300b » Version: N/A
Gl-inet » Gl-xe300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-xe300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-xe300 » Version: N/A
Gl-inet » Gl-ar750s Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ar750s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ar750s » Version: N/A
Gl-inet » Gl-ar750 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ar750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ar750 » Version: N/A
Gl-inet » Gl-mifi Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-mifi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-mifi » Version: N/A
Gl-inet » Gl-ar300m Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-ar300m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-ar300m » Version: N/A
Gl-inet » Gl-usb150 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:gl-usb150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Gl-usb150 » Version: N/A
Gl-inet » Microuter-n300 Firmware
Versions before (<) 3.216
cpe:2.3:o:gl-inet:microuter-n300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Gl-inet » Microuter-n300 » Version: N/A

Vulnerability Details : CVE-2023-31478

Exploit prediction scoring system (EPSS) score for CVE-2023-31478

CVSS scores for CVE-2023-31478

References for CVE-2023-31478

Products affected by CVE-2023-31478