← CVE Intelligence

CVE-2023-49256

Predictable encryption passphrase used in publicly accessible configuration file PUBLISHED

Description (CNA)

It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded static key.

Affected (CNA)

Vendor / productVersions
Hongdian / H8951-4G-ESPaffected 0 before 2310271149

CWE

CWE-321

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.