medium5.5
CVE-2021-28150
Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
Impact
Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hongdian | H8922 Firmware | Version 3.0.5 |