CVE-2023-41355

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive information leaking.

Score
CVSS 3.1 9.8 Critical
Status
Modified - twcert@cert.org.tw
Published
2023-11-03
Last modified
2024-10-14
Weaknesses
CWE-20, CWE-940

Affected products

References

 
 
© AVABIS GmbH privacypolicy about