Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-41355 EUVD-2023-45858GHSA-5297-2xjq-2cfx

Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation

Published Nov 3, 2023 · Updated Oct 14, 2024 · Assigned by twcert

Description

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive information leaking.

Affected products

VendorProductAffectedFixed
Chunghwa Telecom NOKIA G-040W-Q G040WQR201207 —

References