CVEvulnerability

CVE-2014-5395

6.8 MEDIUM Published 2014-11-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users for requests that (1) modify configurations, (2) send SMS messages, or have other unspecified impact via unknown vectors.

Affected configurations

• huawei e5180s-22 firmware (<= e5180s-22tcpu-21.270.05.01.00) • huawei e3276 firmware (<= webui-13.100.09.00.03) • huawei e3276 firmware (<= e3276s-150tcpu-22.265.03.00.00) • huawei e3236 firmware (<= webui-13.100.10.00.03) • huawei e586bs-2 firmware (<= e586bs-2tcpu-21.322.08.00.889) • huawei e3236 firmware (<= e3236s-2tcpu-22.146.29.00.00)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References