Vulnerability Description
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Comfast Project | Cf-Wr623N Firmware | <= 2.3.0.1 |
| Comfast Project | Cf-Wr623N | - |
Related Weaknesses (CWE)
References
- https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/auth_bypass.m
- https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/auth_bypass.m
FAQ
What is CVE-2022-47700?
CVE-2022-47700 is a vulnerability with a CVSS score of 7.5 (HIGH). COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be ma...
How severe is CVE-2022-47700?
CVE-2022-47700 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-47700?
Check the references section above for vendor advisories and patch information. Affected products include: Comfast Project Cf-Wr623N Firmware, Comfast Project Cf-Wr623N.