Lucene search
HistoryJan 31, 2023 - 6:15 p.m.
CVE-2022-47700
comfast
cf-wr623n
router
firmware
vulnerability
incorrect access control
improper authentication
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
32.5%
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.
Affected configurations
Node
comfast_projectcf-wr623n_firmwareRange≤2.3.0.1
comfast_projectcf-wr623nMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| comfast_project | cf-wr623n_firmware | * | cpe:2.3:o:comfast_project:cf-wr623n_firmware:*:*:*:*:*:*:*:* |
| comfast_project | cf-wr623n | - | cpe:2.3:h:comfast_project:cf-wr623n:-:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2023-01-31 18:15:00
cve
cve
CVE-2022-47700
2023-01-31 18:15:09
cvelist
cvelist
CVE-2022-47700
2023-01-31 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
32.5%
Related for NVD:CVE-2022-47700