CVE-2021-28151

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command…

published May 6, 2021

CVSS
—
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27912 · 98.1th percentile
Published
2021-05-06T15:11Z
EPSS history
Timeline
  • 06 MAY 15:11Z
    Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command…
    cvelistv5