CVE-2023-41350CWE-307

Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts

High · published November 3, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more susceptible to brute force attacks.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00754 · 54.6th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2023-11-03T04:44Z
EPSS history
Timeline
  • 03 NOV 04:44Z
    Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts
    cvelistv5