Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-41354 EUVD-2023-45857GHSA-4cgw-v6r3-9jcg

Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information

Published Nov 3, 2023 · Updated Sep 5, 2024 · Assigned by twcert

Description

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an actor.

Affected products

VendorProductAffectedFixed
Chunghwa Telecom NOKIA G-040W-Q G040WQR201207 —

References