Lucene search

MitreCVE-2022-47697

HistoryJan 31, 2023 - 6:15 p.m.

CVE-2022-47697

2023-01-3118:15:09

mitre

web.nvd.nist.gov

cve-2022-47697

comfast

router

firmware

v2.3.0.1

account takeover

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.

Affected configurations

Nvd

Node

comfast_projectcf-wr623nMatch-

AND

comfast_projectcf-wr623n_firmwareRange≤2.3.0.1

VendorProductVersionCPE
comfast_projectcf-wr623n-cpe:2.3:h:comfast_project:cf-wr623n:-:*:*:*:*:*:*:*
comfast_projectcf-wr623n_firmware*cpe:2.3:o:comfast_project:cf-wr623n_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
comfast_project	cf-wr623n	-	cpe:2.3:h:comfast_project:cf-wr623n:-:::::::*
comfast_project	cf-wr623n_firmware	*	cpe:2.3:o:comfast_project:cf-wr623n_firmware::::::::

References

github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/unauth_account_takeover

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

Related for CVE-2022-47697