Hongdian H8951-4G-ESP
Approved changes feed: RSS · Atom
cpe:2.3:h:hongdian:h8951-4g-esp:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Hongdian (2b8e93d1-d9c3-5f4a-b9ce-7f44811f6d5b) |
|---|---|
| Product | H8951 4G Esp (be45c14b-6750-5c7e-bd44-313e7727086b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49262 |
not_vulnerable | 2026-06-08 06:14:28.901442 |
Buffer overflow vulnerability in Cookie authentication field
The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session.
Published: 2024-01-12T14:25:36.654Z
Updated: 2025-06-03T14:04:54.692Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49261 |
not_vulnerable | 2026-06-08 06:14:28.900800 |
Sensitive authentication-related value accessible publicly
The "tokenKey" value used in user authorization is visible in the HTML source of the login page.
Published: 2024-01-12T14:25:26.606Z
Updated: 2024-10-10T15:36:06.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49260 |
not_vulnerable | 2026-06-08 06:14:28.897456 |
Stored cross-site scripting vulnerability
An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.
Published: 2024-01-12T14:25:17.934Z
Updated: 2025-06-03T14:05:05.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49259 |
not_vulnerable | 2026-06-08 06:14:28.896808 |
Bruteforcing authentication cookie for a given user
The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.
Published: 2024-01-12T14:25:12.037Z
Updated: 2025-06-20T16:41:23.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49258 |
not_vulnerable | 2026-06-08 06:14:28.896273 |
Reflected cross-site scripting vulnerability
User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at "/gui/terminal_tool.cgi" in the "data" parameter.
Published: 2024-01-12T14:24:57.134Z
Updated: 2025-06-03T14:05:11.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49257 |
not_vulnerable | 2026-06-08 06:14:28.895754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49256 |
not_vulnerable | 2026-06-08 06:14:28.895236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49255 |
not_vulnerable | 2026-06-08 06:14:28.894783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49254 |
not_vulnerable | 2026-06-08 06:14:28.893985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49253 |
not_vulnerable | 2026-06-08 06:14:28.893341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.