CVE-2022-47697

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-01-31

Last modified

2025-03-27

Weaknesses

CWE-640

Affected products

• Cf-wr623n Firmware (Comfast Project)

References

• https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/unauth_account_takeover