Skip to content
OpenAdvisories
High · 7.5 CVE-2023-41350 EUVD-2023-45853GHSA-xpm5-27r6-28fv

Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts

Published Nov 3, 2023 · Updated Sep 6, 2024 · Assigned by twcert

Description

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more susceptible to brute force attacks.

Affected products

VendorProductAffectedFixed
Chunghwa Telecom NOKIA G-040W-Q G040WQR201207 —

References