title: Stored cross-site scripting vulnerability
description: An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
defaultStatus: unaffected
product: H8951-4G-ESP
vendor: Hongdian
versions:
lessThan: 2310271149, status: affected, version: 0, versionType: custom
}