Read the docs
TI-2023-26897 Aliases CVE-2023-49255GHSA-fw6m-hgqv-hr8c

Router console accessible without authentication

Priority MEDIUM 50CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-306.

Summary

The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order to modify the configuration, the session state is shared. If any other user is currently logged in, the anonymous user can execute commands in the context of the authenticated one. If the logged in user has administrative privileges, it is possible to use webadmin service configuration commands to create a new admin user with a chosen password.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00716 54th percentileScored 2026-11-07
Fix Fixed H8951-4G-ESP (Hongdian): 2310271149

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HongdianH8951-4G-ESPbefore 23102711492310271149Patch availableCNA
  • H8951-4G-ESP VendorHongdian Affected before 2310271149 Fixed in 2310271149 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*before 2310271149VulnerableHongdian
cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:*not specified by NVDRunning onHongdian
  • cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:* Versions before 2310271149 Vulnerable ·Hongdian
  • cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hongdian

Remediation

  • Fix · CNA H8951-4G-ESP (Hongdian) Fixed in 2310271149

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Hongdian H8951-4G-ESP 2310271149

    10 records Highest priority Priority MEDIUM 5 MEDIUM, 5 LOW

    Other records, highest priority first

    • TI-2023-26904 Buffer overflow vulnerability in Cookie authentication fieldPriority MEDIUM 50
    • TI-2023-26895 Predefined root passwordPriority MEDIUM 50
    • TI-2023-26896 Command injection in the network test toolsPriority MEDIUM 41
    Show all 10 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-49255
  2. 2026-10-03 Alias added: GHSA-fw6m-hgqv-hr8c

References

Advisory 2

  • TI-2023-26904 Buffer overflow vulnerability in Cookie authentication field CVSS 3.1CRITICAL 9.8
  • TI-2023-26895 Predefined root password CVSS 3.1CRITICAL 9.8
  • TI-2023-26896 Command injection in the network test tools CVSS 3.1HIGH 8.8
  • TI-2023-26899 Command execution using the certificate upload utility CVSS 3.1HIGH 8.8
  • TI-2023-26903 Sensitive authentication-related value accessible publicly CVSS 3.1HIGH 7.5
  • TI-2023-26901 Bruteforcing authentication cookie for a given user CVSS 3.1HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences