CVE-2023-31478
Summary
| CVE | CVE-2023-31478 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-05-09 23:15:00 UTC |
| Updated | 2023-05-17 16:04:00 UTC |
| Description | An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Gl-inet | Gl-a1300 | - | All | All | All |
| Operating System | Gl-inet | Gl-a1300 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-ap1300 | - | All | All | All |
| Hardware | Gl-inet | Gl-ap1300lte | - | All | All | All |
| Operating System | Gl-inet | Gl-ap1300lte Firmware | All | All | All | All |
| Operating System | Gl-inet | Gl-ap1300 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-ar300m | - | All | All | All |
| Operating System | Gl-inet | Gl-ar300m Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-ar750 | - | All | All | All |
| Hardware | Gl-inet | Gl-ar750s | - | All | All | All |
| Operating System | Gl-inet | Gl-ar750s Firmware | All | All | All | All |
| Operating System | Gl-inet | Gl-ar750 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-ax1800 | - | All | All | All |
| Operating System | Gl-inet | Gl-ax1800 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-axt1800 | - | All | All | All |
| Operating System | Gl-inet | Gl-axt1800 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-b1300 | - | All | All | All |
| Operating System | Gl-inet | Gl-b1300 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-b2200 | - | All | All | All |
| Operating System | Gl-inet | Gl-b2200 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-e750 | - | All | All | All |
| Operating System | Gl-inet | Gl-e750 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-mifi | - | All | All | All |
| Operating System | Gl-inet | Gl-mifi Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-mt1300 | - | All | All | All |
| Operating System | Gl-inet | Gl-mt1300 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-mt2500 | - | All | All | All |
| Hardware | Gl-inet | Gl-mt2500a | - | All | All | All |
| Operating System | Gl-inet | Gl-mt2500a Firmware | All | All | All | All |
| Operating System | Gl-inet | Gl-mt2500 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-mt3000 | - | All | All | All |
| Operating System | Gl-inet | Gl-mt3000 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-mt300n-v2 | - | All | All | All |
| Operating System | Gl-inet | Gl-mt300n-v2 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-mv1000 | - | All | All | All |
| Hardware | Gl-inet | Gl-mv1000w | - | All | All | All |
| Operating System | Gl-inet | Gl-mv1000w Firmware | All | All | All | All |
| Operating System | Gl-inet | Gl-mv1000 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-s10 | - | All | All | All |
| Operating System | Gl-inet | Gl-s10 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-s1300 | - | All | All | All |
| Operating System | Gl-inet | Gl-s1300 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-s20 | - | All | All | All |
| Hardware | Gl-inet | Gl-s200 | - | All | All | All |
| Operating System | Gl-inet | Gl-s200 Firmware | All | All | All | All |
| Operating System | Gl-inet | Gl-s20 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-sf1200 | - | All | All | All |
| Operating System | Gl-inet | Gl-sf1200 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-sft1200 | - | All | All | All |
| Operating System | Gl-inet | Gl-sft1200 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-usb150 | - | All | All | All |
| Operating System | Gl-inet | Gl-usb150 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-x1200 | - | All | All | All |
| Operating System | Gl-inet | Gl-x1200 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-x3000 | - | All | All | All |
| Operating System | Gl-inet | Gl-x3000 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-x300b | - | All | All | All |
| Operating System | Gl-inet | Gl-x300b Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-x750 | - | All | All | All |
| Operating System | Gl-inet | Gl-x750 Firmware | All | All | All | All |
| Hardware | Gl-inet | Gl-xe300 | - | All | All | All |
| Operating System | Gl-inet | Gl-xe300 Firmware | All | All | All | All |
| Hardware | Gl-inet | Microuter-n300 | - | All | All | All |
| Operating System | Gl-inet | Microuter-n300 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-issues/SSID_Key_Disclosure.md at main · gl-inet/CVE-issues · GitHub | MISC | github.com | |
| GL.iNet - Connecting The World To Secure Wi-Fi | MISC | www.gl-inet.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.