CVE-2023-41353

Published: Nov 3, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.

Affected (1)

Products: Nokia: G 040w Q Firmware

1 product

G 040w Q Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nokia G 040w Q Firmware	Version g040wqr201207

Running on/with	Platform Versions
Nokia G 040w Q	All versions

Related CWEs

Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References (2)

https://www.twcert.org.tw/tw/cp-132-7503-a27ed-1.html

Source: twcert@cert.org.tw

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-7503-a27ed-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.