Description
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hongdian | H8951-4G-ESP | < 2310271149 | 2310271149 |
References
- https://cert.pl/en/posts/2024/01/CVE-2023-49253/ third-party-advisory
- https://cert.pl/posts/2024/01/CVE-2023-49253/ third-party-advisory