PatchTheCVECVE-2023-49254: Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the
CVE-2023-49254 is a high-severity flaw (CVSS 8.8) affecting h8951-4g-esp firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, however, it can still be exploited by sending POST requests directly.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 46%) |
| CISA exploited list | No |
| Weakness | CWE-78 |
| Published | 2024-01-12 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-49254?
h8951-4g-esp firmware: upgrade to 2310271149. Exact commands for each OS are on this page.
Is CVE-2023-49254 being exploited?
CVE-2023-49254 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-49254 affect?
CVE-2023-49254 affects h8951-4g-esp firmware. Severity is high (CVSS 8.8). Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface
How urgent is CVE-2023-49254?
Priority 44/100. High severity
Related CVEs
- CVE-2023-49262 CRITICAL 9.8 UPGRADE The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, pr
- CVE-2023-49261 HIGH 7.5 UPGRADE The "tokenKey" value used in user authorization is visible in the HTML source of the login page.
- CVE-2023-49260 MEDIUM 6.1 UPGRADE An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi"
- CVE-2023-49259 HIGH 7.5 UPGRADE The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up
- CVE-2023-49258 MEDIUM 6.1 UPGRADE User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging