Medium severity6.1NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026
CVE-2023-49258
CVE-2023-49258
Description
User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at "/gui/terminal_tool.cgi" in the "data" parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:hongdian:h8951-4g-esp_firmware:*:*:*:*:*:*:*:*range: <2310271149
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- cert.pl/en/posts/2024/01/CVE-2023-49253/nvdThird Party Advisory
- cert.pl/posts/2024/01/CVE-2023-49253/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.