GCVE - cpe:2.3:a:opennds:captive_portal:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:opennds:captive_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Opennds (`f711636b-a7fa-51da-ac70-64ebc167c264`)
Product	Captive Portal (`e9fc108c-bca6-59ed-b29c-7df3700bbaf5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/opennds`	purl2cpe	2026-06-01 10:11:50.759620
`pkg:deb/ubuntu/opennds`	purl2cpe	2026-06-01 10:11:50.759622
`pkg:github/opennds/opennds`	purl2cpe	2026-06-01 10:11:50.759623

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-38324`	vulnerable	2026-06-08 06:08:17.586210	Details available An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3. Published: 2023-11-17T00:00:00.000Z Updated: 2024-11-26T20:12:30.137Z Open on db.gcve.eu Reference links https://openwrt.org/docs/guide-user/services/captive-portal/opennds https://github.com/openNDS/openNDS/releases/tag/v10.1.2 https://github.com/openNDS/openNDS/blob/master/ChangeLog https://www.forescout.com/resources/sierra21-vulnerabilities https://cwe.mitre.org/data/definitions/1390.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38322`	vulnerable	2026-06-08 06:08:17.585296	Details available An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated, and can be triggered only when the BinAuth option is set. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3. Published: 2023-11-17T00:00:00.000Z Updated: 2024-08-02T17:39:12.969Z Open on db.gcve.eu Reference links https://github.com/openNDS/openNDS/releases/tag/v10.1.2 https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80 https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38320`	vulnerable	2026-06-08 06:08:17.578907	Details available An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). This problem was fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3. Published: 2023-11-17T00:00:00.000Z Updated: 2024-08-02T17:39:12.561Z Open on db.gcve.eu Reference links https://github.com/openNDS/openNDS/releases/tag/v10.1.2 https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.2vJg3d85.dpbs https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38316`	vulnerable	2026-06-08 06:08:17.575187	Details available An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3. Published: 2023-11-17T00:00:00.000Z Updated: 2024-09-04T20:19:25.521Z Open on db.gcve.eu Reference links https://github.com/openNDS/openNDS/releases/tag/v10.1.2 https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80 https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38315`	vulnerable	2026-06-08 06:08:17.574855	Details available An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3. Published: 2023-11-17T00:00:00.000Z Updated: 2024-08-02T17:39:12.610Z Open on db.gcve.eu Reference links https://github.com/openNDS/openNDS/releases/tag/v10.1.2 https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80 https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38314`	vulnerable	2026-06-08 06:08:17.574567	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38313`	vulnerable	2026-06-08 06:08:17.574197	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.