H8951-4g-esp Firmware Security Vulnerabilities and Issues — H8951-4g-esp Firmware CVE List

Lucene search

HongdianH8951-4g-esp Firmware

2 matches found

CVE•added 2024/01/12 3:15 p.m.•34 views

CVE-2023-49260

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.

6.1CVSS7.5AI score0.00078EPSS

CVE•added 2024/01/12 3:15 p.m.•20 views

CVE-2023-49258

User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at "/gui/terminal_tool.cgi" in the "data" parameter.

6.1CVSS6.2AI score0.00079EPSS