CVE-2023-41354

CVE-2023-41354 describes a vulnerability in Chunghwa Telecom NOKIA G-040W-Q firewalls where the default configuration fails to block ICMP TIMESTAMP requests. This allows an unauthenticated remote attacker to exploit the flaw by sending a crafted package, leading to the exposure of partially sensitive information. Rated as MEDIUM severity with a CVSS score of 5.3, the attack requires no user interaction or privileges and has low complexity, primarily impacting confidentiality. There is currently no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, though it has garnered some community discussion and media coverage.