CVE-2023-41355: Nokia G-040w-Q Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive information leaking.

Affected products

• Nokia G-040w-Q Firmware: version g040wqr201207 only

Published 2023-11-03. Last modified 2026-06-17.