Skip to content
OpenAdvisories

Vendor

Hongdian

10 known vulnerabilities.

Products

H8951-4G-ESP 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-49260

    Stored cross-site scripting vulnerability

    An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.

    Hongdian H8951-4G-ESP
  • Medium 6.1
    CVE-2023-49258

    Reflected cross-site scripting vulnerability

    User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at "/gui/terminal_tool.cgi" in the "data" parameter.

    Hongdian H8951-4G-ESP