Default credentials

2021-05-0616:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

JSON

Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.

CPENameOperatorVersion
h8922_firmwareeq3.0.5

CPE	Name	Operator	Version
	h8922_firmware	eq	3.0.5

References

en.hongdian.com/Products/Details/H8922

ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/