CVE-2023-41354: Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information

Published Nov 3, 2023

Updated

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an actor.

Affected Software

2 affected components

All of the following

Nokia G-040w-q Firmware=g040wqr201207

Nokia G-040W-Q

Remediation

Information

Update version to G040WQR231013.

Event History

Nov 3, 2023

CVE Published

05:52 AM

Data Sourced

05:52 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-41354.

What is the title of the vulnerability?

The title of the vulnerability is Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information.

What is the description of the vulnerability?

The vulnerability allows an unauthenticated remote attacker to partially expose sensitive information by exploiting the Chunghwa Telecom NOKIA G-040W-Q Firewall function's failure to block ICMP TIMESTAMP requests by default.

What software is affected by the vulnerability?

The Nokia G-040w-q Firmware with version g040wqr201207 is affected.

What is the severity level of the vulnerability?

The severity of the vulnerability is medium (4 out of 10).