CVE-2022-47697

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover

Critical Β· published January 31, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

🚨 Admin accounts at risk! A critical flaw in COMFAST CF-WR623N Router firmware allows anyone to reset admin passwords β€” like giving a stranger the keys to your digital castle! πŸ”₯ Think of it like a hotel where anyone can change the locks to the rooms just by asking at the front desk. No verification needed β€” a recipe for chaos! An attacker with malicious intent could easily take over the admin account, giving them the power to alter network settings, monitor traffic, or even kick users off the network entirely. The potential fallout could be absolutely devastating, exposing sensitive data and compromising the entire network's integrity!

Put simply

Think of it like a hotel where anyone can change the locks to the rooms just by asking at the front desk. No verification needed β€” a recipe for chaos! This vulnerability allows unauthorized users to reset admin passwords on affected router firmware versions (V2.3.0.1 and earlier) without proper authentication, leading to account takeover.

What to do

An attacker with malicious intent could easily take over the admin account, giving them the power to alter network settings, monitor traffic, or even kick users off the network entirely. The potential fallout could be absolutely devastating, exposing sensitive data and compromising the entire network's integrity! To secure your setup, immediately update the router firmware to the latest version released by COMFAST. Additionally, ensure all default passwords are changed during setup to prevent unauthorized access. Regularly review your network settings for any suspicious changes. You've got this! Secure your network by taking these steps, and you'll be a cybersecurity hero in no time! πŸ¦Έβ€β™‚οΈπŸ›‘οΈ

The record
Technical detail
CVSS v3.1
9.8 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00621 Β· 49.1th percentile
Published
2023-01-31T00:00Z
EPSS history
Timeline
  • 31 JAN 00:00Z
    COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover
    cvelistv5