CVE-2023-49255

CVE-2023-49255 is a critical authentication bypass vulnerability affecting Hongdian H8951 4G ESP routers, allowing unauthenticated access to the router console. An attacker can exploit shared session states to execute commands in the context of an authenticated user, potentially creating new administrative users if an administrator is logged in. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.