CVE-2023-31475

Published May 11, 2023 CVSS 3.1 · 9 Critical EPSS 13.7% KEV · Not listed
Description
An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Gl-inet Gl-a1300 Gl-a1300 Firmware Gl-ap1300 Gl-ap1300 Firmware Gl-ap1300lte Gl-ap1300lte Firmware Gl-ar300m Gl-ar300m Firmware Gl-ar750 Gl-ar750 Firmware Gl-ar750s Gl-ar750s Firmware Gl-ax1800 Gl-ax1800 Firmware Gl-axt1800 Gl-axt1800 Firmware Gl-b1300 Gl-b1300 Firmware Gl-b2200 Gl-b2200 Firmware Gl-e750 Gl-e750 Firmware Gl-mifi Gl-mifi Firmware Gl-mt1300 Gl-mt1300 Firmware Gl-mt2500 Gl-mt2500 Firmware Gl-mt2500a Gl-mt2500a Firmware Gl-mt3000 Gl-mt3000 Firmware Gl-mt300n-v2 Gl-mt300n-v2 Firmware Gl-mv1000 Gl-mv1000 Firmware Gl-mv1000w Gl-mv1000w Firmware Gl-s10 Gl-s10 Firmware Gl-s1300 Gl-s1300 Firmware Gl-s20 Gl-s200 Gl-s200 Firmware Gl-s20 Firmware Gl-sf1200 Gl-sf1200 Firmware Gl-sft1200 Gl-sft1200 Firmware Gl-usb150 Gl-usb150 Firmware Gl-x1200 Gl-x1200 Firmware Gl-x3000 Gl-x3000 Firmware Gl-x300b Gl-x300b Firmware Gl-x750 Gl-x750 Firmware Gl-xe300 Gl-xe300 Firmware Microuter-n300 Microuter-n300 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jan 27, 2025, 5:17 PM
Reserved
Apr 28, 2023, 12:00 AM
Status
Modified
Published
May 11, 2023, 11:15 AM
Modified
Jun 17, 2026, 5:57 AM