[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCQjImsxX4_cB-8S9P2Ok3Q-i_DbzceCPMFklUGv84cA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":38,"kevVulnerabilities":98,"topProductsByCves":99,"seoMetadata":104,"meta":113},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":37},23145,"openwrt",4,115,0,92,"2025-11-04","o",[16,20,26,32],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},123487,61,109,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},123486,"luci",22,5,"2023-04-10",{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},123484,"lede",9,2,"2020-03-16",{"id":33,"product_name":34,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":36},123485,"libuci",1,"2019-08-23","Openwrt is a technology vendor with 4 tracked products and 115 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[39,48,54,61,66,71,75,80,87,92],{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":46,"epssScore":47},"CVE-2024-20017","In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation Patch ID: WCNCR00350938; Issue ID: MSV-1132.","2024-03-04",9.8,"v3.1","Critical",false,0.46609,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":43,"cvssVersion":52,"severity":45,"isKev":46,"epssScore":53},"CVE-2019-12272","In OpenWrt LuCI through 0.10, the endpoints admin\u002Fstatus\u002Frealtime\u002Fbandwidth_status and admin\u002Fstatus\u002Frealtime\u002Fwireless_status of the web application are affected by a command injection vulnerability.","2019-05-23","v3.0",0.07369,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":44,"severity":59,"isKev":46,"epssScore":60},"CVE-2018-11116","OpenWrt mishandles access control in \u002Fetc\u002Fconfig\u002Frpcd and the \u002Fusr\u002Fshare\u002Frpcd\u002Facl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that were only supposed to be accessible to a specific user, as demonstrated by the file, log, and service namespaces, potentially leading to remote Information Disclosure or Code Execution. NOTE: The developer disputes this as a vulnerability, indicating that rpcd functions appropriately","2018-06-19",8.8,"High",0.02881,{"cveId":62,"description":63,"publishedDate":31,"cvssScore":64,"cvssVersion":44,"severity":59,"isKev":46,"epssScore":65},"CVE-2020-7248","libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.",7.5,0.02486,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":46,"epssScore":70},"CVE-2020-28951","libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.","2020-11-19",0.01778,{"cveId":72,"description":73,"publishedDate":36,"cvssScore":64,"cvssVersion":52,"severity":59,"isKev":46,"epssScore":74},"CVE-2019-15513","An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. \u002Ftmp\u002F.uci\u002Fnetwork locking is mishandled after reception of a long SetWanSettings command, leading to a device hang.",0.01747,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":58,"cvssVersion":44,"severity":59,"isKev":46,"epssScore":79},"CVE-2021-28961","applications\u002Fluci-app-ddns\u002Fluasrc\u002Fmodel\u002Fcbi\u002Fddns\u002Fdetail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests.","2021-03-21",0.01697,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":44,"severity":85,"isKev":46,"epssScore":86},"CVE-2020-10871","In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other (more complex) ways, and there is no plan to restrict the information further","2020-03-23",5.3,"Medium",0.01679,{"cveId":88,"description":89,"publishedDate":31,"cvssScore":90,"cvssVersion":44,"severity":59,"isKev":46,"epssScore":91},"CVE-2020-7982","An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the opkg package manager before 2020-01-25 prevents correct parsing of embedded checksums in the signed repository index, allowing a man-in-the-middle attacker to inject arbitrary package payloads (which are installed without verification).",8.1,0.01596,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":44,"severity":59,"isKev":46,"epssScore":97},"CVE-2023-20820","In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.","2023-09-04",7.2,0.01591,[],[100,101,102,103],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":36},{"title":105,"metaDescription":106,"keywords":107,"structuredData":108},"Openwrt - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openwrt covering 4 products with 115 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openwrt vulnerabilities, Openwrt security, Openwrt CVE, Openwrt threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":109,"@type":110,"name":111,"description":106,"url":112},"https:\u002F\u002Fschema.org","Organization","Openwrt","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenwrt",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":114,"apiVersion":115},"2026-10-19T19:22:02.325Z","3.0"]