CVEvulnerability

CVE-2014-2968

4.3 MEDIUM Published 2014-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message.

Affected configurations

• huawei e355 web ui 11.001.08.00.03 • huawei e355 firmware 21.157.37.01.910 • huawei e355 ch1e355sm

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References