Advisories · Technology
Hongdian H8951-4G-ESP.
Every CVE that names Hongdian H8951-4G-ESP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow vulnerability in Cookie authentication field
- Hongdian H8951-4G-ESP
- Memory corruption
- CVSS 7.5 High
Sensitive authentication-related value accessible publicly
- Hongdian H8951-4G-ESP
- Information disclosure
- CVSS 6.1 Medium
Stored cross-site scripting vulnerability
- Hongdian H8951-4G-ESP
- Cross-site scripting (XSS)
- CVSS 7.5 High
Bruteforcing authentication cookie for a given user
- Hongdian H8951-4G-ESP
- CWE-341
- CVSS 6.1 Medium
Reflected cross-site scripting vulnerability
- Hongdian H8951-4G-ESP
- Cross-site scripting (XSS)
- CVSS 8.8 High
Command execution using the certificate upload utility
- Hongdian H8951-4G-ESP
- Broken access control
- CVSS 7.5 High
Predictable encryption passphrase used in publicly accessible configuration file
- Hongdian H8951-4G-ESP
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Router console accessible without authentication
- Hongdian H8951-4G-ESP
- Authentication bypass
- CVSS 8.8 High
Command injection in the network test tools
- Hongdian H8951-4G-ESP
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Predefined root password
- Hongdian H8951-4G-ESP
- Hard-coded credentials