high8.8
CVE-2021-28151
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, whi…
Impact
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hongdian | H8922 Firmware | Version 3.0.5 |