Nokia G-040w-q Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Nokia G-040w-q Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-41351 — CVSS 9.8 (critical): Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the…
• CVE-2023-41355 — CVSS 9.8 (critical): Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated…
• CVE-2023-41353 — CVSS 8.8 (high): Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily…
• CVE-2023-41350 — CVSS 7.5 (high): Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An…
• CVE-2023-41352 — CVSS 7.2 (high): Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator…
• CVE-2023-41354 — CVSS 4.0 (medium): Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can…