Description
The "tokenKey" value used in user authorization is visible in the HTML source of the login page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hongdian | H8951-4G-ESP | < 2310271149 | 2310271149 |
References
- https://cert.pl/en/posts/2024/01/CVE-2023-49253/ third-party-advisory
- https://cert.pl/posts/2024/01/CVE-2023-49253/ third-party-advisory