Description
An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hongdian | H8951-4G-ESP | < 2310271149 | 2310271149 |
References
- https://cert.pl/en/posts/2024/01/CVE-2023-49253/ third-party-advisory
- https://cert.pl/posts/2024/01/CVE-2023-49253/ third-party-advisory