Openwrt

openwrt

143 CVEs • 4 products

Products (4)

Click to collapse

Toggle

CVEs (143)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-32806 4Google LinuxfoundationMediatek+1 more 4Android Iot YoctoOpenwrt+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo...Show more In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589.Show less
CVE-2023-20832 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.Show less
CVE-2023-20831 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014162.Show less
CVE-2023-20830 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156.Show less
CVE-2023-20829 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014148.Show less
CVE-2023-20828 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014144.Show less
CVE-2023-20821 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937113; Issue ID: ALPS07937113.Show less
CVE-2023-20820 1Openwrt 1Openwrt Jun 17, 2026 Sep 4, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation....Show more In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.Show less
CVE-2023-20796 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.Show less
CVE-2023-20790 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.Show less
CVE-2023-20775 2Google Openwrt 2Android Openwrt Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410.Show less
CVE-2023-20725 3Google OpenwrtRdkcentral 3Android OpenwrtRdk B Jun 17, 2026 Jun 6, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only); Issue ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only).Show less
CVE-2023-20726 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdkb+1 more Jun 17, 2026 May 15, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl...Show more In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07735968 / ALPS07884552 (For MT6880, MT6890, MT6980, MT6980D and MT6990 only); Issue ID: ALPS07735968 / ALPS07884552 (For MT6880, MT6890, MT6980, MT6980D and MT6990 only).Show less
CVE-2023-20696 2Google Openwrt 2Android Openwrt Jun 17, 2026 May 15, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only).Show less
CVE-2023-20695 2Google Openwrt 2Android Openwrt Jun 17, 2026 May 15, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only); Issue ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only).Show less
CVE-2023-20694 2Google Openwrt 2Android Openwrt Jun 17, 2026 May 15, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07733998 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07733998 / ALPS07874388 (For MT6880 and MT6890 only).Show less
CVE-2023-24182 1Openwrt 1Openwrt Jun 17, 2026 Apr 11, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js.
CVE-2023-24181 1Openwrt 1Luci Jun 17, 2026 Apr 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm.
CVE-2022-41435 1Openwrt 1Luci Jun 17, 2026 Nov 3, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js. This vulnerability allows attackers to execute arbitrary web...Show more OpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /system/sshkeys.js. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted public key comments.Show less
CVE-2022-38333 1Openwrt 1Openwrt Jun 17, 2026 Sep 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

Previous 1...4 567 8 Next