CVE-2023-41353CWE-521

Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements

High · published November 3, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2023-11-03T05:48Z
EPSS history
Timeline
  • 03 NOV 05:48Z
    Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements
    cvelistv5