Read the docs
TI-2023-26904 Aliases CVE-2023-49262GHSA-8p4h-69c2-3352

Buffer overflow vulnerability in Cookie authentication field

Priority MEDIUM 50CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution, Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-190, CWE-287 and the CVSS impact.

Summary

The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00666 52nd percentileScored 2026-11-07
Fix Fixed H8951-4G-ESP (Hongdian): 2310271149

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HongdianH8951-4G-ESPbefore 23102711492310271149Patch availableCNA
  • H8951-4G-ESP VendorHongdian Affected before 2310271149 Fixed in 2310271149 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*before 2310271149VulnerableHongdian
cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:*not specified by NVDRunning onHongdian
  • cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:* Versions before 2310271149 Vulnerable ·Hongdian
  • cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hongdian

Remediation

  • Fix · CNA H8951-4G-ESP (Hongdian) Fixed in 2310271149

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Hongdian H8951-4G-ESP 2310271149

    10 records Highest priority Priority MEDIUM 5 MEDIUM, 5 LOW

    Other records, highest priority first

    • TI-2023-26897 Router console accessible without authenticationPriority MEDIUM 50
    • TI-2023-26895 Predefined root passwordPriority MEDIUM 50
    • TI-2023-26896 Command injection in the network test toolsPriority MEDIUM 41
    Show all 10 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-49262
  2. 2026-10-03 Alias added: GHSA-8p4h-69c2-3352

References

Advisory 2

  • TI-2023-26897 Router console accessible without authentication CVSS 3.1CRITICAL 9.8
  • TI-2023-26895 Predefined root password CVSS 3.1CRITICAL 9.8
  • TI-2023-26896 Command injection in the network test tools CVSS 3.1HIGH 8.8
  • TI-2023-26899 Command execution using the certificate upload utility CVSS 3.1HIGH 8.8
  • TI-2023-26903 Sensitive authentication-related value accessible publicly CVSS 3.1HIGH 7.5
  • TI-2023-26901 Bruteforcing authentication cookie for a given user CVSS 3.1HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences