high8.8
CVE-2023-49257
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
Impact
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hongdian | H8951-4g-Esp Firmware | before 2310271149 |