NOKIA G-040W-Q vulnerabilities
5 known vulnerabilities in NOKIA G-040W-Q from Chunghwa Telecom. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for…
Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting
- 8.8 High severity
NOKIA G-040W-Q: Weak Password Requirements
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing
- 7.2 High severity
NOKIA G-040W-Q: Improper Neutralization of Special Elements used in an OS Command
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system
- 9.8 Critical severity
NOKIA G-040W-Q: Missing Authentication for Critical Functionality
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remot
- 9.8 Critical severity
NOKIA G-040W-Q: Improper Restriction of Excessive Authentication Attempts
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypa