CVE-2022-47699

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control

Critical · published January 31, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

🚨 A sneaky incorrect access control flaw in the COMFAST CF-WR623N Router leaves the door wide open for attackers! 🔥 Imagine a hotel where anyone can waltz into any room without a keycard. That’s exactly what this vulnerability does—an attacker could stroll right into your network without breaking a sweat! An attacker could exploit this vulnerability to access sensitive parts of your network, potentially allowing them to view or alter data, manipulate connections, or even hijack the router entirely. This could lead to an absolute security nightmare, jeopardizing your entire home or business environment.

Put simply

Imagine a hotel where anyone can waltz into any room without a keycard. That’s exactly what this vulnerability does—an attacker could stroll right into your network without breaking a sweat! This vulnerability arises because the firmware doesn’t properly validate user permissions, allowing unauthorized access to restricted areas. Essentially, it’s like allowing a guest to enter the staff-only areas without any checks.

What to do

An attacker could exploit this vulnerability to access sensitive parts of your network, potentially allowing them to view or alter data, manipulate connections, or even hijack the router entirely. This could lead to an absolute security nightmare, jeopardizing your entire home or business environment. Update the CF-WR623N Router firmware to version 2.3.0.2 as soon as possible to patch this issue. Additionally, review your access controls and ensure those settings are correctly implemented across your network devices. You've got this! Secure your router today and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Published
2023-01-31T00:00Z
EPSS history
Timeline
  • 31 JAN 00:00Z
    COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control
    cvelistv5