CVE-2023-41350: Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts

Published Nov 3, 2023

Updated

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more susceptible to brute force attacks.

Affected Software

2 affected components

Nokia G-040w-q Firmware=g040wqr201207

Nokia G-040W-Q

Remediation

Information

Update version to G040WQR231013.

Event History

Nov 3, 2023

CVE Published

via MITRE·04:44 AM

Data Sourced

via MITRE·04:44 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-41350.

What is the title of this vulnerability?

The title of this vulnerability is 'Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts'.

What is the severity level of CVE-2023-41350?

The severity level of CVE-2023-41350 is critical with a severity value of 9.8.

How does this vulnerability affect Chunghwa Telecom NOKIA G-040W-Q?

This vulnerability affects Chunghwa Telecom NOKIA G-040W-Q by allowing an unauthenticated remote attacker to execute a crafted Javascript to expose captcha on the page, making it easier for bots to bypass the captcha check.

Is there a fix available for CVE-2023-41350?

There is no information available about a fix for CVE-2023-41350 at the moment.