CVE-2023-41353

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.

Score

CVSS 3.1 8.8 High

Status

Modified - twcert@cert.org.tw

Published

2023-11-03

Last modified

2024-09-06

Weaknesses

CWE-521

Affected products

• Nokia G-040w-q (Chunghwa Telecom)
• G-040w-q Firmware (Nokia)

References

• https://www.twcert.org.tw/tw/cp-132-7503-a27ed-1.html