TI-2021-09380 CVE-2021-28149 · GHSA-mcvc-q5xw-3pf6
Hongdian H8922 3.0.5 devices allow Directory Traversal.
Priority MEDIUM 45
Hongdian H8922 3.0.5 devices allow Directory Traversal.
Vulnerabilities
4 records
TI-2021-09381 CVE-2021-28150 · GHSA-v446-8p4r-76m4
Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the…
Priority LOW 30
Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
TI-2021-09383 CVE-2021-28152 · GHSA-pqm8-v9ww-9q73
Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell…
Priority MEDIUM 50
Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a superuser.
TI-2021-09382 CVE-2021-28151 · GHSA-qr4g-xxx6-244x
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the…
Priority MEDIUM 61
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.