CVE•Published 2023-08-24•Modified 2026-05-18•1 article on news•6 live references•NVD data

CVE-2023-32077Netmaker · Netmaker

Vulnerability data via NVD (ingested)

CVSS v3.1

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS percentile

Exploit Prediction Scoring System · top 1% of all CVEs

Weaknesses (CWE)

CWE-321Use of Hard-coded Cryptographic Key CWE-798Use of Hard-coded Credentials

Description

Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. The issue is patched in 0.17.1 and fixed in 0.18.6. If users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users. If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone who is using version 0.17.1 can pull the latest docker image of the backend and restart the server.

Timeline

Published 2023-08-24

Modified 2026-05-18

External references

NVD MITRE Exploit-DB GitHub PoC trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2023-32077

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Netmaker Netmaker"

All exposed Netmaker Netmaker instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Netmaker"

HTTP body or banner mentions "Netmaker" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2023-32077