CVE:CVE-2022-45778
CNNVD:CNNVD-202212-3999
Hillstone Networks Firewall是中国山石网科（Hillstone Networks）公司的一系列防火墙。
Hillstone Networks Firewall SG-6000 5.0.4.0及以前版本存在安全漏洞，该漏洞源于其WEB应用防火墙的report.m配置错误导致访问控制出错允许攻击者绕过权限控制并以超级管理员权限进入防火墙后台。
solution:Upgrade hillstonenet sc-6000-wv02_firmware to a higher version than 5.0.4.0,and avoid the version (,5.0.4.0]; Upgrade hillstonenet sc-6000-wv04_firmware to a higher version than 5.0.4.0,and avoid the version (,5.0.4.0]; Upgrade hillstonenet sc-6000-wv08_firmware to a higher version than 5.0.4.0,and avoid the version (,5.0.4.0]; Upgrade hillstonenet sc-6000-wv12_firmware to a higher version than 5.0.4.0,and avoid the version (,5.0.4.0]