Improper Access Control in COMFAST CF-WR623N Router Firmware
CVE-2022-47699

9.8CRITICAL

Key Information:

Vendor

Comfast Project

Status
Cf-wr623n Firmware
Vendor
CVE Published:
31 January 2023

What is CVE-2022-47699?

The COMFAST CF-WR623N Router firmware version 2.3.0.1 contains a flaw related to improper access control. This vulnerability allows attackers to bypass authentication mechanisms, potentially enabling unauthorized access to sensitive functions within the router. This could lead to various security risks, including network exposure and unauthorized changes to configurations.

References

https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.