Nokia

Records169All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high72CVSS 7.0–8.9

Exploited now

Nokia records in CISA KEV

No Nokia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netact 12 records HIGH 1350 Optical Management System 10 records MEDIUM Hit 7300 Firmware 7 records MEDIUM Impact 7 records MEDIUM Network Functions Manager For Transport 7 records MEDIUM G-040w-q Firmware 6 records MEDIUM I-240w-q Gpon Ont Firmware 6 records MEDIUM Mantaray Nm 6 records LOW

Records

6 records in G-040w-q Firmware · all components

TI-2023-21948 CVE-2023-41351 · GHSA-w6x6-2wp3-jqvp

Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control

MEDIUM 51

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2023-11-03 No fix listed CWE-288

TI-2023-21952 CVE-2023-41355 · GHSA-5297-2xjq-2cfx

Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation

MEDIUM 50

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00824 Published 2023-11-03 No fix listed CWE-940

TI-2023-21947 CVE-2023-41350 · GHSA-xpm5-27r6-28fv

Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts

MEDIUM 50

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01 Published 2023-11-03 No fix listed CWE-307

TI-2023-21950 CVE-2023-41353 · GHSA-2h35-xq9p-w64x

Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements

MEDIUM 41

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00734 Published 2023-11-03 No fix listed CWE-521

TI-2023-21949 CVE-2023-41352 · GHSA-88f7-7pf6-46v6

Chunghwa Telecom NOKIA G-040W-Q - Command Injection

LOW 37

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0154 Published 2023-11-03 No fix listed CWE-78

TI-2023-21951 CVE-2023-41354 · GHSA-4cgw-v6r3-9jcg

Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information

LOW 24

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00472 Published 2023-11-03 No fix listed CWE-200

Open these records in search →