What is GHSA-r95v-7x7v-phw8?

GHSA-r95v-7x7v-phw8 is a security advisory published by GitHub Security Advisories with High severity. Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15...

Which CVE IDs does GHSA-r95v-7x7v-phw8 cover?

GHSA-r95v-7x7v-phw8 covers the following CVE IDs: CVE-2024-44667. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r95v-7x7v-phw8?

GHSA-r95v-7x7v-phw8 has a CVSS v3 base score of 8.0, published by GitHub Security Advisories.

GHSA-r95v-7x7v-phw8HighCVSS 8.0

Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15...

Vendor

GitHub Security Advisories

Published

September 10, 2024

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2024-44667 →

📋 Description

Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-44667
https://medium.com/%40sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd
http://shenzhen.com
https://medium.com/@sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd
https://github.com/advisories/GHSA-r95v-7x7v-phw8