CVEvulnerability

CVE-2016-6158

6.1 MEDIUM Published 2016-09-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-09-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:H/Au:N/C:N/I:C/A:C
Weaknesses
CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that (1) restore factory settings or (2) reboot the device via unspecified vectors.

Affected configurations

• huawei ws331a router firmware ws331a-10 v100r001c02b017sp01

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References