CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. See the original NVD description below for full technical details.
CVE
CVE-2023-33621
Severity
MEDIUM
CVSS
5.9
EPSS
0.71%
Original NVD Description
GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
Related CVEs
Other vulnerabilities affecting the same vendor(s)