CVE-2023-49257 (published 2024-01-12T14:24:32.311Z)
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
Affected products: Vendor: Hongdian
Product: H8951-4G-ESP
Versions: 0