medium6.1
CVE-2023-49260
An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path.
Impact
An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hongdian | H8951-4g-Esp Firmware | before 2310271149 |