Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Nokia Component: G-040w-q Firmware Clear all filters
TI-2023-21952 CVE-2023-41355 · GHSA-5297-2xjq-2cfx

Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation

Priority MEDIUM 50

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00824 Published 2023-11-03 No fix listed CWE-940
TI-2023-21951 CVE-2023-41354 · GHSA-4cgw-v6r3-9jcg

Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information

Priority LOW 24

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00472 Published 2023-11-03 No fix listed CWE-200
TI-2023-21949 CVE-2023-41352 · GHSA-88f7-7pf6-46v6

Chunghwa Telecom NOKIA G-040W-Q - Command Injection

Priority LOW 37

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0154 Published 2023-11-03 No fix listed CWE-78
TI-2023-21948 CVE-2023-41351 · GHSA-w6x6-2wp3-jqvp

Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control

Priority MEDIUM 51

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2023-11-03 No fix listed CWE-288