CVE-2013-6031

Currently unrated

Key Information:

Vendor
Huawei
Status
E355 Firmware
E355
Vendor
CVE Published:
11 March 2014

Summary

The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.

References

http://www.kb.cert.org/vuls/id/341526
third-party-advisoryx_refsource_CERT-VN
https://github.com/aczire/huawei-csrf-info_disclosure/blo...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.