Skip to main content

H8951 4G Esp Firmware CVE-2023-49261

HIGH
Insertion of Sensitive Information Into Sent Data (CWE-201)
2024-01-12 cvd@cert.pl
Information Disclosure H8951 4G Esp Firmware
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 19:34 vuln.today
CVE Published
Jan 12, 2024 - 15:15 nvd
HIGH 7.5

DescriptionCVE.org

The "tokenKey" value used in user authorization is visible in the HTML source of the login page.

AnalysisAI

The "tokenKey" value used in user authorization is visible in the HTML source of the login page. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-201. The "tokenKey" value used in user authorization is visible in the HTML source of the login page. Affected products include: Hongdian H8951-4G-Esp Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in H8951 4G Esp Firmware

View all
CVE-2023-49253 CRITICAL
9.8 Jan 12

Root user password is hardcoded into the device and cannot be changed in the user interface. Rated critical severity (CV
CVE-2023-49255 CRITICAL
9.8 Jan 12

The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order
CVE-2023-49262 CRITICAL
9.8 Jan 12

The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided the
CVE-2023-49254 HIGH
8.8 Jan 12

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destinati
CVE-2023-49257 HIGH
8.8 Jan 12

An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execut
CVE-2023-49256 HIGH
7.5 Jan 12

It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded
CVE-2023-49259 HIGH
7.5 Jan 12

The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and
CVE-2023-49258 MEDIUM
6.1 Jan 12

User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS v
CVE-2023-49260 MEDIUM
6.1 Jan 12

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. Rate

Same weakness CWE-201 – Insertion of Sensitive Information Into Sent Data

View all
CVE-2026-39912 CRITICAL POC
9.1
CVE-2021-26566 CRITICAL POC
9.0
CVE-2025-60188 HIGH POC
7.5
CVE-2024-43283 MEDIUM POC
5.3
CVE-2020-37150 HIGH POC
7.5
CVE-2024-32825 HIGH POC
7.5
CVE-2025-31134 HIGH POC
7.5
CVE-2026-47717 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-49261 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy