go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

Chunghwa Telecom NOKIA G-040W-Q - Command Injection

TVN ID TVN-202311008
CVE ID CVE-2023-41352
CVSS 7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products Chunghwa Telecom NOKIA G-040W-Q: G040WQR201207
Description Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.
Solution Update version to 3.0.0.4.386_51948.
Credit Ta-Lun Yen(TXOne Networks)
Public Date 2023-11-03
Top