title: Command execution using the certificate upload utility
description: An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
problem types: CWE-732 Incorrect Permission Assignment for Critical Resource
affected:
{
defaultStatus: unaffected
product: H8951-4G-ESP
vendor: Hongdian
versions:
lessThan: 2310271149, status: affected, version: 0, versionType: custom
}