CVE-2023-41351: fallo crítico en Chunghwa Telecom NOKIA G-040W-Q
Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.8epss 1.0%
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remote attackers to log in as any existing users, such as an administrator, to perform arbitrary system operations or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Chunghwa Telecom · NOKIA G-040W-QCVEs relacionadas — Chunghwa Telecom NOKIA G-040W-Q
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-41352HIGHChunghwa Telecom NOKIA G-040W-Q - Command InjectionEPSS 1.5%CVE-2023-41350HIGHChunghwa Telecom NOKIA G-040W-Q - Excessive Authentication AttemptsEPSS 1.0%CVE-2023-41355CRITICALChunghwa Telecom NOKIA G-040W-Q - Improper Input ValidationEPSS 0.8%CVE-2023-41353HIGHChunghwa Telecom NOKIA G-040W-Q - Weak Password RequirementsEPSS 0.7%CVE-2023-41354MEDIUMChunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive InformationEPSS 0.5%