GL.iNET GL-AR750S Firmware 3.215
Approved changes feed: RSS · Atom
cpe:2.3:o:gl-inet:gl-ar750s_firmware:3.215:*:*:*:*:*:*:*
part: o version: 3.215 update: *
| Vendor | Gl Inet (0ba6498a-0971-5dec-92da-bb83b4dab2f2) |
|---|---|
| Product | Gl Ar750S Firmware (32be8682-f2ac-5082-a9d1-c6b2ad86f26b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-33621 |
vulnerable | 2026-06-08 06:06:23.310158 |
Details available
GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
Published: 2023-06-13T00:00:00.000Z
Updated: 2026-07-09T00:26:07.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33620 |
vulnerable | 2026-06-08 06:06:23.309076 |
Details available
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack.
Published: 2023-06-13T00:00:00.000Z
Updated: 2026-07-09T00:26:05.902Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.