CVE-2024-8073 — Command Injection Vulnerability in Hillstone Networks Web Application Firewall

CVE-2024-8073

Command Injection Vulnerability in Hillstone Networks Web Application Firewall PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7 through 5.5R6-2.8.13.

Affected (CNA)

Vendor / product	Versions
Hillstone Networks / Hillstone Networks Web Application Firewall	affected 2.6.7 through 2.8.13

CWE

CWE-20

References

https://www.hillstonenet.com.cn/security-notification/2024/08/21/mlzrld-2/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.