Incorrect Access Control in COMFAST CF-WR623N Router Firmware
CVE-2022-47700

7.5HIGH

Key Information:

Vendor

Comfast Project

Status
Cf-wr623n Firmware
Vendor
CVE Published:
31 January 2023

What is CVE-2022-47700?

The CF-WR623N Router firmware by COMFAST is susceptible to vulnerabilities stemming from improper access control mechanisms. This flaw allows unauthorized requests to be processed by back-end scripts without requiring valid user authentication or session validation. Inadequate security measures could enable attackers to exploit this weakness, potentially leading to unauthorized access to sensitive data or control over router functionalities. It is crucial for users of the affected firmware version to implement necessary updates or mitigations to safeguard their networks.

References

https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.