TI-2023-19721 CVE-2023-38323 · GHSA-c69w-p7cc-6h7c
An issue was discovered in OpenNDS before 10.1.3.
Priority HIGH 82
An issue was discovered in OpenNDS before 10.1.3.
openNDS
Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
openNDS records in CISA KEVNo openNDS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records
TI-2023-21723 CVE-2023-41101 · GHSA-75j8-mr4c-4x59
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
Priority MEDIUM 53
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
TI-2023-19715 CVE-2023-38317 · GHSA-93h3-xr58-xwf6
An issue was discovered in OpenNDS before 10.1.3.
Priority MEDIUM 51
An issue was discovered in OpenNDS before 10.1.3.
TI-2023-19714 CVE-2023-38316 · GHSA-857f-w8mj-5g2g
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
Priority MEDIUM 51
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
TI-2023-19717 CVE-2023-38319 · GHSA-ppwj-j5xp-6rmh
An issue was discovered in OpenNDS before 10.1.3.
Priority MEDIUM 45
An issue was discovered in OpenNDS before 10.1.3.
TI-2023-19716 CVE-2023-38318 · GHSA-9cp8-26q6-h5f9
An issue was discovered in OpenNDS before 10.1.3.
Priority MEDIUM 45
An issue was discovered in OpenNDS before 10.1.3.
TI-2026-28214 CVE-2026-38820 · GHSA-hw32-3v67-92pf
OS command injection in openNDS
Priority MEDIUM 43
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
TI-2023-21724 CVE-2023-41102 · GHSA-98jh-839r-xp86
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
Priority MEDIUM 41
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
TI-2026-28216 CVE-2026-38822 · GHSA-2h6c-w4mg-27v5
OS command injection in openNDS
Priority MEDIUM 40
In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys.
TI-2023-19720 CVE-2023-38322 · GHSA-596w-g2cr-x93q
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
Priority LOW 35
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
TI-2023-19718 CVE-2023-38320 · GHSA-2hmr-w3hv-h898
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
Priority LOW 35
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
TI-2023-19713 CVE-2023-38315 · GHSA-3w3w-vm78-84r8
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
Priority LOW 35
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
TI-2023-19711 CVE-2023-38313 · GHSA-pg75-xxxv-pv8j
An issue was discovered in OpenNDS Captive Portal before 10.1.2.
Priority LOW 35
An issue was discovered in OpenNDS Captive Portal before 10.1.2.
TI-2026-28215 CVE-2026-38821 · GHSA-rm65-3jj4-3vcm
Heap-based buffer overflow in openNDS
Priority LOW 33
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (denial of service) and potentially achieve rem…
TI-2023-19722 CVE-2023-38324 · GHSA-53v5-7h5p-m6g9
An issue was discovered in OpenNDS before 10.1.2.
Priority LOW 31
An issue was discovered in OpenNDS before 10.1.2.
TI-2023-19712 CVE-2023-38314 · GHSA-9752-mq4c-65h9
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
Priority LOW 31
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
TI-2024-16946 CVE-2024-25763 · GHSA-jrrc-pqj2-c99f
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
Priority LOW 25
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
TI-2026-28213 CVE-2026-38819 · GHSA-53cw-ggrv-83hg
Memory leak in openNDS
Priority LOW 24
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.