Opennds is a modestly represented captive-portal and network-access platform that, despite a focused product scope, occupies a prominent position in public Wi-Fi and guest-network deployments. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur through weakness classes including NULL-pointer dereferences, OS command injection, output-escaping failures, and memory-management issues that are characteristic of network-edge software handling user-supplied traffic and system commands. Defenders should prioritize patching this vendor's releases on internet-facing or guest-accessible instances; live severity, exploitation, and coverage counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Opennds over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-41101CRITICAL An issue was discovered in the captive portal in OpenNDS before version 10.1.3. get_query in http_microhttpd.c does not validate the length of the query string of GET requests. Thi | Nov 17, 2023 | 9.8 | 27 | NO | NO |
CVE-2023-38323CRITICAL An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect acces | Jan 26, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-38319CRITICAL An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this f | Jan 26, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-38318CRITICAL An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file, allowing attackers that have direct or indirect access to t | Jan 26, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-38317CRITICAL An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name entry in the configuration file, allowing attackers that have direct or indirect a | Jan 26, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-38316CRITICAL An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them | Nov 17, 2023 | 9.8 | 26 | NO | NO |
CVE-2023-41102HIGH An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Se | Nov 17, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-38322HIGH An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missi | Nov 17, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-38320HIGH An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a mis | Nov 17, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-38315HIGH An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a | Nov 17, 2023 | 7.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Opennds.
Media articles that mention a CVE ID that affects a product developed by Opennds — matched by CVE ID, not by vendor name.