Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-49257

Command execution using the certificate upload utility

Description

An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hongdian H8951-4G-ESP

Default version status: unaffected

  • 0 to < 2310271149affected

References