VULNERABILITY INTELLIGENCE

CVE-2023-50919

CVSS score9.8 CRITICAL

EPSS probability47.80%

CISA KEVNot currently listed

Published2024-01-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.

Weakness classification

nvd@nist.gov: CWE-287
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287

Primary references

cve@mitre.org
cve@mitre.org — Exploit, Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory