Skip to content
Hongdian vulnerabilities
Newest
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Buffer overflow vulnerability in Cookie authentication field
CVE-2023-49262
9.8 Critical
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Sensitive authentication-related value accessible publicly
CVE-2023-49261
7.5 High
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Stored cross-site scripting vulnerability
CVE-2023-49260
6.1 Medium
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Bruteforcing authentication cookie for a given user
CVE-2023-49259
7.5 High
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Reflected cross-site scripting vulnerability
CVE-2023-49258
6.1 Medium
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Command execution using the certificate upload utility
CVE-2023-49257
8.8 High
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Predictable encryption passphrase used in publicly accessible configuration file
CVE-2023-49256
7.5 High
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Router console accessible without authentication
CVE-2023-49255
9.8 Critical
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Command injection in the network test tools
CVE-2023-49254
8.8 High
-
hongdian h8951-4g-esp, h8951-4g-esp firmware +1 more
Predefined root password
CVE-2023-49253
9.8 Critical
-
hongdian h8922 firmware
Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler...
CVE-2021-28149
EPSS 15.9%
6.5 Medium
-
hongdian h8922 firmware
Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the...
CVE-2021-28150
5.5 Medium
-
hongdian h8922 firmware
Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a...
CVE-2021-28152
9.8 Critical
-
hongdian h8922 firmware
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip...
CVE-2021-28151
EPSS 27.9%
8.8 High