Skip to content
OpenAdvisories
High · 7.2 CVE-2023-41352 EUVD-2023-45855GHSA-88f7-7pf6-46v6

Chunghwa Telecom NOKIA G-040W-Q - Command Injection

Published Nov 3, 2023 · Updated Sep 6, 2024 · Assigned by twcert

Description

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

Affected products

VendorProductAffectedFixed
Chunghwa Telecom NOKIA G-040W-Q G040WQR201207 —

References