CVE-2023-49262: critical vulnerability in Hongdian H8951-4G-ESP
Buffer overflow vulnerability in Cookie authentication field
Published · Updated
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.7%
exploitation probability
0.7%top 48% of all CVEs
observed exploitation
nono source reports it
The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Hongdian · H8951-4G-ESPRelated CVEs — Hongdian H8951-4G-ESP
In the same product, most dangerous first.
CVE-2023-49254HIGHCommand injection in the network test toolsEPSS 0.7%CVE-2023-49255CRITICALRouter console accessible without authenticationEPSS 0.7%CVE-2023-49253CRITICALPredefined root passwordEPSS 0.6%CVE-2023-49261HIGHSensitive authentication-related value accessible publiclyEPSS 0.5%CVE-2023-49256HIGHPredictable encryption passphrase used in publicly accessible configuration fileEPSS 0.5%CVE-2023-49258MEDIUMReflected cross-site scripting vulnerabilityEPSS 0.3%