CVE-2023-31808

CVE-2023-31808 describes a critical vulnerability in Technicolor TG670 devices, specifically firmware version 10.5.N.9, where multiple accounts possess hard-coded passwords, including one with administrative privileges. This flaw allows an unauthenticated attacker to gain unrestricted administrative access over the WAN interface if remote administration is enabled, posing a significant risk of complete system compromise. With a CVSS score of 7.2 (HIGH), the attack is network-based and low complexity, leading to high impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.