CVE-2021-28150

2021-05-0615:12:09

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

JSON

Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.

References

en.hongdian.com/Products/Details/H8922

ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/