peter bassill · operator
$ cve CVE-2023-31475 JSON

CVE-2023-31475

9.8
CRITICAL · CVSS 3.1 · EPSS 13.7% (pctl 96)

Patch early

EPSS 13.7% — above the 10% action threshold.

Description

An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS13.74% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-120
On CISA KEVno
Public exploitnone known
Published2023-05-11
Last modified2026-06-17

Affected (40)

VendorProduct
gl-inetgl-a1300
gl-inetgl-a1300 firmware
gl-inetgl-ap1300
gl-inetgl-ap1300 firmware
gl-inetgl-ax1800
gl-inetgl-ax1800 firmware
gl-inetgl-axt1800
gl-inetgl-axt1800 firmware
gl-inetgl-b1300
gl-inetgl-b1300 firmware
gl-inetgl-b2200
gl-inetgl-b2200 firmware
gl-inetgl-e750
gl-inetgl-e750 firmware
gl-inetgl-mt1300
gl-inetgl-mt1300 firmware
gl-inetgl-mt2500
gl-inetgl-mt2500 firmware
gl-inetgl-mt2500a
gl-inetgl-mt2500a firmware
gl-inetgl-mt3000
gl-inetgl-mt3000 firmware
gl-inetgl-mv1000
gl-inetgl-mv1000 firmware
gl-inetgl-mv1000w
gl-inetgl-mv1000w firmware
gl-inetgl-s10
gl-inetgl-s10 firmware
gl-inetgl-s1300
gl-inetgl-s1300 firmware
gl-inetgl-s20
gl-inetgl-s20 firmware
gl-inetgl-s200
gl-inetgl-s200 firmware
gl-inetgl-sf1200
gl-inetgl-sf1200 firmware
gl-inetgl-sft1200
gl-inetgl-sft1200 firmware
gl-inetgl-x3000
gl-inetgl-x3000 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD