Description
The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hongdian | H8951-4G-ESP | < 2310271149 | 2310271149 |
References
- https://cert.pl/en/posts/2024/01/CVE-2023-49253/ third-party-advisory
- https://cert.pl/posts/2024/01/CVE-2023-49253/ third-party-advisory