CVE-2023-41351: Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control
First published: Fri Nov 03 2023(Updated: )
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remote attackers to log in as any existing users, such as an administrator, to perform arbitrary system operations or disrupt service.
Credit: twcert@cert.org.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nokia G-040w-q Firmware | =g040wqr201207 | |
| NOKIA G-040W-Q |
Remedy
Update version to G040WQR231013.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-41351?
CVE-2023-41351 is a vulnerability of authentication bypass in Chunghwa Telecom NOKIA G-040W-Q.
How severe is CVE-2023-41351?
CVE-2023-41351 has a severity rating of 9.8, which is considered critical.
How does CVE-2023-41351 impact Chunghwa Telecom NOKIA G-040W-Q?
CVE-2023-41351 allows unauthenticated remote attackers to bypass the authentication mechanism and log in to the device using an alternative URL.
How can an attacker exploit CVE-2023-41351?
An unauthenticated remote attacker can exploit CVE-2023-41351 by bypassing the authentication mechanism and logging in as any existing user.
Is there a fix for CVE-2023-41351?
At the moment, there is no known fix for CVE-2023-41351. It is recommended to apply security patches or updates when they become available.
- collector/nvd-api
- agent/severity
- agent/references
- agent/weakness
- agent/title
- agent/author
- agent/type
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nokia
- canonical/nokia g-040w-q firmware
- version/nokia g-040w-q firmware/g040wqr201207
- canonical/nokia g-040w-q