CVE-2024-44667 describes an incorrect access control vulnerability in the HCX H822 4G LTE Router by Shenzhen Haichangxing Technology Co., Ltd. The vulnerability permits unauthenticated attackers to trigger a factory mode reset and inject commands, leading to unauthorized information disclosure and obtaining root shell access. The CVSS 3.1 vector indicates the attack requires adjacent network access with low attack complexity and no user interaction, resulting in high confidentiality, integrity, and availability impacts. No official patch or vendor advisory is currently available.

Successful exploitation allows an unauthenticated attacker with adjacent network access to reset the device to factory mode and inject commands, leading to exposure of sensitive information and full root shell access. This compromises the confidentiality, integrity, and availability of the affected device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the device from untrusted sources and monitor for suspicious activity related to factory reset or command injection attempts.