H8922 Firmware

h8922_firmware

Vendor: Hongdian • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-28152 1Hongdian 1H8922 Firmware Jun 17, 2026 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a superuser. To connect, the telnet service is used on port 5188 with the default credentials of root:superzxmn.
CVE-2021-28151 1Hongdian 1H8922 Firmware Jun 17, 2026 May 6, 2021 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.
CVE-2021-28150 1Hongdian 1H8922 Firmware Jun 17, 2026 May 6, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
CVE-2021-28149 1Hongdian 1H8922 Firmware Jun 17, 2026 May 6, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by s...Show more Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file.Show less