CVE-2023-41353 HIGH

CVE-2023-41353: Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements

Vendor Chunghwa Telecom
Product NOKIA G-040W-Q
Weakness CWE-521
Published November 3, 2023
Last update September 6, 2024

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.

Key dates

02Disclosure timeline

November 3, 2023 CVE published
September 6, 2024 Record updated