Description
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthenticated() that can be triggered with a crafted GET HTTP request with a missing redirect query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). Affected OpenNDS Captive Portal before version 10.1.2 fixed infixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on28. August 2023 by updating OpenNDS to version 10.1.3.
References (3)
Core 3
Core References
Release Notes, Vendor Advisory
https://github.com/openNDS/openNDS/releases/tag/v10.1.2
Scores
CVSS v3
6.5
EPSS
0.0063
EPSS Percentile
70.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (1)
opennds/captive_portal
< 10.1.2
Published
Nov 17, 2023
Tracked Since
Feb 18, 2026