HOMEVULNERABILITIESVENDORSComfast Project

Comfast ProjectCVEs & Vulnerabilities

5 CVEs affecting Comfast Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

cf-wr623n 5cf-wr623n firmware 5
CVE-2022-47701MEDIUM

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS).

31 Jan 2023
6.1
CVSS
CVE-2022-47700HIGH

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.

31 Jan 2023
7.5
CVSS
CVE-2022-47699CRITICAL

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.

31 Jan 2023
9.8
CVSS
CVE-2022-47698MEDIUM

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.

31 Jan 2023
6.1
CVSS
CVE-2022-47697CRITICAL

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.

31 Jan 2023
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database