H8951-4g-esp Firmware Security Vulnerabilities and Issues — H8951-4g-esp Firmware CVE List

Lucene search

HongdianH8951-4g-esp Firmware

3 matches found

cve•added 2024/01/12 3:15 p.m.•40 views

CVE-2023-49259

The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.

7.5CVSS7.6AI score0.00045EPSS

cve•added 2024/01/12 3:15 p.m.•23 views

CVE-2023-49256

It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded static key.

7.5CVSS7.5AI score0.00082EPSS

cve•added 2024/01/12 3:15 p.m.•22 views

CVE-2023-49261

The "tokenKey" value used in user authorization is visible in the HTML source of the login page.

7.5CVSS7.4AI score0.00121EPSS