Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S GL-MT2500 GL-AXT1800 GL-X3000 and GL-SFT1200.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2023-46453 Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username that is both a valid SQL stat… https://www.cve.org/CVERecord?id=CVE-2023-46453
Post summary
The notice briefly describes a GL.iNet authentication bypass that permits administrative control, providing technical details of the flaw but lacking PoC, patch, or evidence of active exploitation.
CVE-2023-46453 Authentication Bypass in GL.iNet Devices 4.x Firmware via SQL Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-46453
Post summary
The post announces a SQL injection vulnerability (CVE‑2023‑46453) in GL.iNet 4.x firmware that allows authentication bypass, but offers no PoC, exploit, active exploitation evidence, or patch information.