Read the docs
TI-2023-26896 Aliases CVE-2023-49254GHSA-9pqq-c77f-g45f

Command injection in the network test tools

Priority MEDIUM 41CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-78.

Summary

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, however, it can still be exploited by sending POST requests directly.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00733 54th percentileScored 2026-11-07
Fix Fixed H8951-4G-ESP (Hongdian): 2310271149

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HongdianH8951-4G-ESPbefore 23102711492310271149Patch availableCNA
  • H8951-4G-ESP VendorHongdian Affected before 2310271149 Fixed in 2310271149 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*before 2310271149VulnerableHongdian
cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:*not specified by NVDRunning onHongdian
  • cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:* Versions before 2310271149 Vulnerable ·Hongdian
  • cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hongdian

Remediation

  • Fix · CNA H8951-4G-ESP (Hongdian) Fixed in 2310271149

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Hongdian H8951-4G-ESP 2310271149

    10 records Highest priority Priority MEDIUM 5 MEDIUM, 5 LOW

    Other records, highest priority first

    • TI-2023-26904 Buffer overflow vulnerability in Cookie authentication fieldPriority MEDIUM 50
    • TI-2023-26897 Router console accessible without authenticationPriority MEDIUM 50
    • TI-2023-26895 Predefined root passwordPriority MEDIUM 50
    Show all 10 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-49254
  2. 2026-10-03 Alias added: GHSA-9pqq-c77f-g45f

References

Advisory 2

  • TI-2023-26904 Buffer overflow vulnerability in Cookie authentication field CVSS 3.1CRITICAL 9.8
  • TI-2023-26897 Router console accessible without authentication CVSS 3.1CRITICAL 9.8
  • TI-2023-26895 Predefined root password CVSS 3.1CRITICAL 9.8
  • TI-2023-26899 Command execution using the certificate upload utility CVSS 3.1HIGH 8.8
  • TI-2023-26903 Sensitive authentication-related value accessible publicly CVSS 3.1HIGH 7.5
  • TI-2023-26901 Bruteforcing authentication cookie for a given user CVSS 3.1HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences