Cf Wr623n Firmware

CVEs (5)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-47699	Comfast CF-WR623N	Cri	0.64	9.8	0.01	Jan 31, 2023	COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.
CVE-2022-47697	Comfast CF-WR623N	Cri	0.64	9.8	0.01	Jan 31, 2023	COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.
CVE-2022-47700	Comfast CF-WR623N	Hig	0.49	7.5	0.01	Jan 31, 2023	COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.
CVE-2022-47701	Comfast CF-WR623N	Med	0.40	6.1	0.00	Jan 31, 2023	COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-47698	Comfast CF-WR623N	Med	0.40	6.1	0.00	Jan 31, 2023	COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.

CVE-2022-47699CriJan 31, 2023
Comfast
CF-WR623N
risk 0.64cvss 9.8epss 0.01
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.
CVE-2022-47697CriJan 31, 2023
Comfast
CF-WR623N
risk 0.64cvss 9.8epss 0.01
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.
CVE-2022-47700HigJan 31, 2023
Comfast
CF-WR623N
risk 0.49cvss 7.5epss 0.01
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.
CVE-2022-47701MedJan 31, 2023
Comfast
CF-WR623N
risk 0.40cvss 6.1epss 0.00
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-47698MedJan 31, 2023
Comfast
CF-WR623N
risk 0.40cvss 6.1epss 0.00
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.