CVE-2023-41353: Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-41353?
CVE-2023-41353 is a vulnerability in Chunghwa Telecom NOKIA G-040W-Q which has weak password requirements, allowing a remote attacker to infer the administrator password and gain admin access.
How severe is CVE-2023-41353?
CVE-2023-41353 has a severity rating of 8.8 (high).
How can a remote attacker exploit CVE-2023-41353?
A remote attacker with regular user privilege can log in to the system, infer the administrator password from system information, and then gain admin access.
What is the impact of CVE-2023-41353?
The impact of CVE-2023-41353 is that the attacker can perform arbitrary system operations or disrupt services.
Is there a fix for CVE-2023-41353?
It is recommended to update the firmware of the Chunghwa Telecom NOKIA G-040W-Q device to a version that addresses the weak password requirements vulnerability.