CVE-2024-8073

CRITICAL 9.8CVE-2024-8073 · Published 26/08/2024 · updated 17/06/2026

In short

CVE-2024-8073 is a CRITICAL (CVSS 9.8) vulnerability affecting web application firewall (hillstonenet).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web application firewall hillstonenet	`= 5.5r6-2.6.7= 5.5r6-2.8.13`	No fix yet

Description

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7 through 5.5R6-2.8.13.

References

hillstonenet.com.cn/security-notification/2024/08/21/mlzrld-2 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free