Openwrt
Page 2 of 2 — Openwrt CVEs from a corpus of 161, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20071 | Medium | 4.4 | 2024-06-03 | In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2024-20056 | Medium | 6.7 | 2024-05-06 | In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execut… |
CVE-2023-32871 | Medium | 5.3 | 2024-05-06 | In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2024-20054 | Medium | 6.6 | 2024-04-01 | In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-20053 | High | 8.4 | 2024-04-01 | In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20052 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20051 | Low | 2.3 | 2024-04-01 | In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. U… |
CVE-2024-20050 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20049 | Medium | 4.4 | 2024-04-01 | In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privi… |
CVE-2024-20040 | High | 8.8 | 2024-04-01 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additiona… |
CVE-2024-20023 | Medium | 6.7 | 2024-03-04 | In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20022 | Medium | 6.7 | 2024-03-04 | In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20017 | Critical | 9.8 | 2024-03-04 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional executio… |
CVE-2024-20006 | Medium | 6.7 | 2024-02-05 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-32855 | Medium | 6.7 | 2023-12-04 | In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32815 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32813 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32812 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System executi… |
CVE-2023-32806 | Medium | 6.7 | 2023-09-04 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executio… |
CVE-2023-20832 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20831 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20830 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20829 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20828 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20821 | Medium | 6.7 | 2023-09-04 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20820 | High | 7.2 | 2023-09-04 | In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privile… |
CVE-2023-20796 | Medium | 4.4 | 2023-08-07 | In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges n… |
CVE-2023-20790 | Medium | 4.4 | 2023-08-07 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20775 | Medium | 6.7 | 2023-07-04 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20725 | Medium | 6.7 | 2023-06-06 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20726 | Low | 3.3 | 2023-05-15 | In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional executi… |
CVE-2023-20696 | Medium | 6.7 | 2023-05-15 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20695 | Medium | 6.7 | 2023-05-15 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20694 | Medium | 6.7 | 2023-05-15 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-24182 | Medium | 5.4 | 2023-04-11 | LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkey… |
CVE-2023-24181 | Medium | 5.4 | 2023-04-10 | LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pa… |
CVE-2022-41435 | Medium | 5.4 | 2022-11-03 | OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js… |
CVE-2022-38333 | High | 7.5 | 2022-09-19 | Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers… |
CVE-2021-45906 | Medium | 5.4 | 2021-12-27 | OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen. |
CVE-2021-45905 | Medium | 5.4 | 2021-12-27 | OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen. |
CVE-2021-45904 | Medium | 5.4 | 2021-12-27 | OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen. |
CVE-2021-32019 | Medium | 6.1 | 2021-08-02 | There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the luci web-interface allows XSS, which can… |
CVE-2021-33425 | Medium | 5.4 | 2021-05-25 | A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary… |
CVE-2021-27821 | Medium | 6.1 | 2021-05-25 | The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability. |
CVE-2021-28961 | High | 8.8 | 2021-03-21 | applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary command… |
CVE-2021-22161 | Medium | 6.5 | 2021-02-07 | In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upst… |
CVE-2019-25015 | Medium | 5.4 | 2021-01-26 | LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID. |
CVE-2020-28951 | Critical | 9.8 | 2020-11-19 | libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_packag… |
CVE-2020-10871 | Medium | 5.3 | 2020-03-23 | In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance… |
CVE-2020-7982 | High | 8.1 | 2020-03-16 | An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the opkg package manager before 2020-01-25… |
CVE-2020-7248 | High | 7.5 | 2020-03-16 | libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflo… |
CVE-2019-19945 | High | 7.5 | 2020-03-16 | uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subse… |
CVE-2019-18993 | Medium | 5.4 | 2019-12-03 | OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-… |
CVE-2019-18992 | Medium | 5.4 | 2019-12-03 | OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New S… |
CVE-2019-5102 | Medium | 4.0 | 2019-11-18 | An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, t… |
CVE-2019-5101 | Medium | 4.0 | 2019-11-18 | An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, t… |
CVE-2019-17367 | High | 8.8 | 2019-10-18 | OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, fir… |
CVE-2019-15513 | High | 7.5 | 2019-08-23 | An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR0… |
CVE-2019-12272 | Critical | 9.8 | 2019-05-23 | In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affecte… |
CVE-2018-19630 | Medium | 6.1 | 2018-11-28 | cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XS… |
CVE-2018-11116 | High | 8.8 | 2018-06-19 | OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i… |