CVE

CVE-2021-28151

8.8

CVSS

Description

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.

Attack Vector

Privileges Req.

User Interaction

Updated Oct 24, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2021-28151 Scanner

CVE-2021-28151 scanner - Command Injection vulnerability in Hongdian H8922

Used 2.2k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →