CVE-2023-49258 (published 2024-01-12T14:24:57.134Z)
User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at "/gui/terminal_tool.cgi" in the "data" parameter.
Affected products: Vendor: Hongdian
Product: H8951-4G-ESP
Versions: 0