PT-2014-6450

CVE-2014-5395

·

Publicado

2014-11-21

·

Atualizado

2019-01-08

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Huawei HiLink E3276 versions before V200R002B470D13SP00C00 Huawei HiLink E3236 TCPU versions before V200R002B470D13SP00C00 Huawei HiLink E3236 WebUI versions before V100R007B100D03SP01C03 Huawei E5180s-22 versions before 21.270.21.00.00 Huawei E586Bs-2 versions before 21.322.10.00.889
Description The issue allows remote attackers to hijack user authentication for requests, potentially modifying configurations, sending SMS messages, or having other unspecified impacts.
Recommendations For Huawei HiLink E3276 versions before V200R002B470D13SP00C00, update to V200R002B470D13SP00C00 or later. For Huawei HiLink E3236 TCPU versions before V200R002B470D13SP00C00, update to V200R002B470D13SP00C00 or later. For Huawei HiLink E3236 WebUI versions before V100R007B100D03SP01C03, update to V100R007B100D03SP01C03 or later. For Huawei E5180s-22 versions before 21.270.21.00.00, update to 21.270.21.00.00 or later. For Huawei E586Bs-2 versions before 21.322.10.00.889, update to 21.322.10.00.889 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-352: Cross-Site Request Forgery (CSRF)
Identificadores relacionados
CVE-2014-5395
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com