CVE-2023-50920 Auth bypass in n/a
Attackers can hijack sessions and bypass authentication on GL.iNet routers due to predictable session IDs after reboots.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-50920?
CVE-2023-50920 is a medium-severity authentication bypass vulnerability in n/a, published on 12 Jan 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legitimate users or perform unauthorized actions. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.
Weakness: CWE-384
Which versions are affected by CVE-2023-50920?
It affects 12 products.
Products include Gl-Inet Gl-A1300 Firmware, Gl-Inet Gl-Ar300m Firmware, Gl-Inet Gl-Ar750 Firmware, Gl-Inet Gl-Ar750s Firmware, Gl-Inet Gl-Ax1800 Firmware, Gl-Inet Gl-Axt1800 Firmware and 6 more.
How do I fix CVE-2023-50920?
No fix has been published for CVE-2023-50920 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-50920 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-50920 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-pxmv-x94g-j48f.