CVE-2023-38324 - Vulnerability Details - OpenCVE

An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Opennds	Captive Portal

Configuration 1 [-]

cpe:2.3:a:opennds:captive_portal:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://cwe.mitre.org/data/definitions/1390.html
https://github.com/openNDS/openNDS/blob/master/ChangeLog
https://github.com/openNDS/openNDS/releases/tag/v10.1.2
https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80
https://openwrt.org/docs/guide-user/services/captive-portal/opennds
https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs
https://www.forescout.com/resources/sierra21-vulnerabilities

History

Tue, 26 Nov 2024 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-11-17T00:00:00

Updated: 2024-11-26T20:12:30.137Z

Reserved: 2023-07-14T00:00:00

Link: CVE-2023-38324

Vulnrichment

Updated: 2024-08-02T17:39:12.822Z

NVD

Status : Modified

Published: 2023-11-17T06:15:33.760

Modified: 2024-11-21T08:13:20.150

Link: CVE-2023-38324

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-38324", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-11-26T20:12:30.137Z", "dateReserved": "2023-07-14T00:00:00", "datePublished": "2023-11-17T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-06-20T18:04:10.422406"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds"}, {"url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2"}, {"url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog"}, {"url": "https://www.forescout.com/resources/sierra21-vulnerabilities"}, {"url": "https://cwe.mitre.org/data/definitions/1390.html"}, {"url": "https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80"}, {"url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:39:12.822Z"}, "title": "CVE Program Container", "references": [{"url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds", "tags": ["x_transferred"]}, {"url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2", "tags": ["x_transferred"]}, {"url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog", "tags": ["x_transferred"]}, {"url": "https://www.forescout.com/resources/sierra21-vulnerabilities", "tags": ["x_transferred"]}, {"url": "https://cwe.mitre.org/data/definitions/1390.html", "tags": ["x_transferred"]}, {"url": "https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80", "tags": ["x_transferred"]}, {"url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-01-30T20:08:20.655775Z", "id": "CVE-2023-38324", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T20:12:30.137Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds", "tags": ["x_transferred"]}, {"url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2", "tags": ["x_transferred"]}, {"url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog", "tags": ["x_transferred"]}, {"url": "https://www.forescout.com/resources/sierra21-vulnerabilities", "tags": ["x_transferred"]}, {"url": "https://cwe.mitre.org/data/definitions/1390.html", "tags": ["x_transferred"]}, {"url": "https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80", "tags": ["x_transferred"]}, {"url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:39:12.822Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-38324", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-01-30T20:08:20.655775Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T20:11:55.325Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds"}, {"url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2"}, {"url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog"}, {"url": "https://www.forescout.com/resources/sierra21-vulnerabilities"}, {"url": "https://cwe.mitre.org/data/definitions/1390.html"}, {"url": "https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80"}, {"url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-06-20T18:04:10.422406"}}}, "cveMetadata": {"cveId": "CVE-2023-38324", "state": "PUBLISHED", "dateUpdated": "2024-11-26T20:12:30.137Z", "dateReserved": "2023-07-14T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-11-17T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:opennds:captive_portal:*:*:*:*:*:*:*:*", "matchCriteriaId": "41C7501E-5FCE-4728-A6DC-9DD6C0468496", "versionEndExcluding": "10.1.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authenticate) when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en OpenNDS Captive Portal antes de la versi\u00f3n 10.1.2. Permite a los usuarios omitir la secuencia de la p\u00e1gina de presentaci\u00f3n cuando usan la clave FAS predeterminada y cuando OpenNDS est\u00e1 configurado como FAS (predeterminado)."}], "id": "CVE-2023-38324", "lastModified": "2024-11-21T08:13:20.150", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-11-17T06:15:33.760", "references": [{"source": "cve@mitre.org", "url": "https://cwe.mitre.org/data/definitions/1390.html"}, {"source": "cve@mitre.org", "url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog"}, {"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2"}, {"source": "cve@mitre.org", "url": "https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80"}, {"source": "cve@mitre.org", "url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds"}, {"source": "cve@mitre.org", "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs"}, {"source": "cve@mitre.org", "url": "https://www.forescout.com/resources/sierra21-vulnerabilities"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://cwe.mitre.org/data/definitions/1390.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/openwrt/routing/commit/0b19771fb2dd81e7c428759610aed583171eed80"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006-v4/#sthash.2vJg3d85.rwx82g1C.dpbs"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.forescout.com/resources/sierra21-vulnerabilities"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}