Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-8073 EUVD-2024-48918GHSA-vp43-mc38-mmg5

Command Injection Vulnerability in Hillstone Networks Web Application Firewall

Published Aug 26, 2024 · Updated Aug 27, 2024 · Assigned by Hillstone

Vendor: Hillstone Networks Product: Hillstone Networks Web Application Firewall

Description

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7 through 5.5R6-2.8.13.

Affected products

VendorProductAffectedFixed
Hillstone Networks Hillstone Networks Web Application Firewall 2.6.7 – ≤ 2.8.13 —

References