VULNERABILITY INTELLIGENCE

CVE-2024-8073

CVSS score9.8 CRITICAL
EPSS probability1.14%
CISA KEVNot currently listed
Published2024-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7 through 5.5R6-2.8.13.

Weakness classification

  • sec@hillstonenet.com: CWE-20
  • nvd@nist.gov: CWE-77

Primary references