Hy511 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:njhyst:hy511_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Njhyst (4f1a694b-878a-545d-a9ae-706e5ccb10f6) |
|---|---|
| Product | Hy511 Firmware (27ff0971-e585-516c-9ca1-654535e1e5d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65212 |
vulnerable | 2026-06-08 07:39:20.777456 |
Details available
An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the device management backend. By reading the corresponding username and self-decrypted MD5 password in the core configuration file, the attacker can directly log in to the backend, thereby bypassing the front-end backend login page.
Published: 2026-01-06T00:00:00.000Z
Updated: 2026-01-06T16:39:03.626Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.