High severity8.8NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026
CVE-2023-49257
CVE-2023-49257
Description
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*range: <2310271149
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- cert.pl/en/posts/2024/01/CVE-2023-49253/nvdThird Party Advisory
- cert.pl/posts/2024/01/CVE-2023-49253/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.