Description
It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded static key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hongdian | H8951-4G-ESP | < 2310271149 | 2310271149 |
References
- https://cert.pl/en/posts/2024/01/CVE-2023-49253/ third-party-advisory
- https://cert.pl/posts/2024/01/CVE-2023-49253/ third-party-advisory