CVE-2023-41101

CVE-2023-41101 is a critical buffer overflow vulnerability affecting OpenNDS captive portal software versions prior to 10.1.3. The flaw, residing in the get_query function, allows attackers to trigger either a stack-based or heap-based buffer overflow by sending specially crafted GET requests with an unvalidated query string length. This vulnerability carries a CVSS score of 9.8 (Critical), indicating it can be exploited remotely without user interaction to achieve Denial-of-Service or Remote Code Execution. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, including an article from BleepingComputer.