Back to KEVs

CVE-2023-31478

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and...

Basic Information

CVE State
PUBLISHED
Reserved Date
April 28, 2023
Published Date
May 09, 2023
Last Updated
January 29, 2025
Vendor
GL.iNet
Product
All
Description
An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.
Tags
nuclei_scanner

CVSS Scores

CVSS v3.1

7.5 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Score
84.20% (Percentile: 99.25%) as of 2025-05-21

SSVC Information

Exploitation
poc
Technical Impact
partial

Exploit Status

Exploited in the Wild
Yes (added 2025-05-03 00:00:00 UTC) Source

References

https://www.gl-inet.com https://github.com/gl-inet/CVE-issues/blob/main/3.215/SSID_Key_Disclosure.md

Known Exploited Vulnerability Information

Source Added Date
The Shadowserver (via CIRCL) 2025-05-03 00:00:00 UTC

Scanner Integrations

Scanner URL Date Detected
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31478.yaml 2025-04-26 00:00:00 UTC