CVE-2023-33621: GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the Op...

Security readout for executives and security teams

CVE-2023-33621 affects GL.iNET GL-AR750S-Ext firmware v3.215. When downloading an OpenVPN Server configuration file, the router places the admin authentication token in the URL. URLs can be stored in browser history, proxy logs, or web server/access logs, so someone who obtains that token could replay the session and bypass normal login. Exposure is most relevant where GL.iNET GL-AR750S-Ext routers run firmware v3.215 and administrators use the OpenVPN Server configuration download function. Risk increases if management traffic passes through shared systems, proxies, remote access tools, or logging platforms that retain full URLs. Treat as a targeted administrative exposure risk, not a broad internet worm scenario based on current evidence. Prioritize affected routers used for VPN administration, especially in environments with centralized logging or shared admin workstations. Mitigation focus: Check GL.iNET guidance for fixed firmware or recommended workaround.; Restrict router administration access to trusted networks and administrators.; Avoid downloading OpenVPN Server configs from shared or monitored browsers..

Prepared

Jul 5, 2026, 21:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.