CVE-2023-41354: Nokia G-040w-Q Firmware

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an actor.

Affected products

• Nokia G-040w-Q Firmware: version g040wqr201207 only

Published 2023-11-03. Last modified 2026-06-17.