CVE-2021-28150

CVE-2021-28150 affects Hongdian H8922 3.0.5. The NVD and related sources describe an information-disclosure flaw where an unprivileged guest can read cli.conf (containing the administrator password and other sensitive data) via /backup2.cgi. The issue is triggered by accessing backup2.cgi, enabli...

CVE-2021-28150

Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf with the administrator password and other sensitive data via /backup2.cgi...

CVE-2021-28152

The CVE-2021-28152 entry affects Hongdian H8922 devices (version 3.0.5). The issue is an undocumented feature that allows a superuser shell via the telnet service on port 5188 using default credentials root:superzxmn. Impact is severe (high/critical in CVSS vectors), with unauthenticated network ...

CVE-2021-28151

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address aka Destination field to the tools.cgi ping command, which is accessible with the username guest and password guest...

CVE-2021-28151

Hongdian H8922 3.0.5 devices are vulnerable to remote command injection in tools.cgi ping via shell metacharacters in the ip-address (Destination) field, accessible with guest/guest credentials. The Nuclei template and other sources confirm that an attacker can execute arbitrary commands on the d...

PT-2021-17778 · Hongdian · Hongdian H8922

Name of the Vulnerable Software and Affected Versions: Hongdian H8922 version 3.0.5 Description: The issue concerns an undocumented feature in the affected device, allowing unauthorized access to a shell with superuser privileges. This access is facilitated through the telnet service on port 5188...

Hongdian H8922 输入验证错误漏洞

The Hongdian H8922 is a router from the Chinese company Hongdian. A security vulnerability exists in the Hongdian H8922 3.0.5 devices that allows unprivileged users to read cli.conf with administrator password and other sensitive data via backup2.cgi...

Hongdian H8922 路径遍历漏洞

The Hongdian H8922 is a router from the Chinese company Hongdian. A path traversal vulnerability exists in the Hongdian H8922 3.0.5 devices. The vulnerability allows remote attackers to download any file from the device with minimal privileges...

Hongdian H8922 授权问题漏洞

The Hongdian H8922 is a router from China's Hongdian Corporation Hongdian. An authorization issue vulnerability exists in the Hongdian H8922 3.0.5 devices that allows superuser access to the shell...

Hongdian H8922 操作系统命令注入漏洞

The Hongdian H8922 is a router from the Chinese company Hongdian. Hongdian H8922 3.0.5 devices suffers from an operating system command injection vulnerability that can be exploited by an attacker to gain access via username guest and password guest...

Arbitrary File Download Vulnerability in H8922 Industrial Router of Shenzhen Hongdian Technology Co.

H8922 industrial router is designed with high performance 32-bit MIPS processor and embedded operating system. Shenzhen Hongdian Technology Co., Ltd H8922 Industrial Router has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in H8922 Industrial Router of Shenzhen Hongdian Technology Co.

H8922 industrial router is designed with high performance 32-bit MIPS processor and embedded operating system. A command execution vulnerability exists in the H8922 Industrial Router of Shenzhen Hongdian Technology Company Limited, which can be exploited by an attacker to obtain server control...

Denial of Service Vulnerability in H8922 4G Wireless Router

Shenzhen Hongdian Technology Co., Ltd H8922 supports dual-SIM card backup; built-in WiFi module, supports wired and wireless, wireless and wireless backup each other; richer interfaces and better expandability 4 LAN ports, 1 WAN port; it is a feature-rich, widely used industrial-grade VPN router...