CVE-2023-49254 | Hongdian H8951-4G-ESP prior 2310271149 HTTP POST Request destination os command injection

A vulnerability was found in Hongdian H8951-4G-ESP. It has been classified as critical. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument destination leads to os command injection.

This vulnerability is traded as CVE-2023-49254. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.