CVE Catalog
CVE-2023-33620
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.53%
41th percentile - higher than 41% of all known CVEs
Summary
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications, allowing attackers to eavesdrop via a man-in-the-middle attack.
Risk Assessment
The organization is at risk of sensitive data being intercepted between the device and the network, potentially leading to information leakage or further attacks.
Recommendation
It is recommended to immediately update the firmware to the latest version that fixes this vulnerability and to enforce encrypted communication (e.g., TLS).
Original NVD description (English source)
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack.