Nokia G-040W-Q
Approved changes feed: RSS · Atom
cpe:2.3:h:nokia:g-040w-q:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Nokia (817976ae-06c5-5680-b3fe-e55f44d8308a) |
|---|---|
| Product | G 040W Q (ce3e6702-574f-5080-9a3e-142fbf9b843a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41355 |
not_vulnerable | 2026-06-08 06:11:05.997825 |
Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation
CRITICAL (9.8)
Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive information leaking.
Published: 2023-11-03T05:55:07.221Z
Updated: 2024-10-14T04:02:18.834Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41354 |
not_vulnerable | 2026-06-08 06:11:05.997264 |
Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information
MEDIUM (4)
Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an actor.
Published: 2023-11-03T05:52:33.724Z
Updated: 2024-09-05T14:33:15.250Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41353 |
not_vulnerable | 2026-06-08 06:11:05.996588 |
Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements
HIGH (8.8)
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.
Published: 2023-11-03T05:48:22.031Z
Updated: 2024-09-06T19:54:18.201Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41352 |
not_vulnerable | 2026-06-08 06:11:05.995799 |
Chunghwa Telecom NOKIA G-040W-Q - Command Injection
HIGH (7.2)
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.
Published: 2023-11-03T05:44:39.924Z
Updated: 2024-09-06T19:55:40.699Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41351 |
not_vulnerable | 2026-06-08 06:11:05.995216 |
Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control
CRITICAL (9.8)
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remote attackers to log in as any existing users, such as an administrator, to perform arbitrary system operations or disrupt service.
Published: 2023-11-03T05:41:26.852Z
Updated: 2024-09-04T20:10:05.622Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41350 |
not_vulnerable | 2026-06-08 06:11:05.994651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.