CVE-2014-2968

2014-07-2414:55:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-2968

cross-site scripting

xss

huawei e355

modem

software vulnerability

remote code injection

sms vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

JSON

Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message.

Affected configurations

NVD

Node

huaweie355_web_uiMatch11.001.08.00.03

huaweie355_firmwareMatch21.157.37.01.910

AND

huaweie355Matchch1e355sm

CPENameOperatorVersion
huawei:e355_web_uihuawei e355 web uieq11.001.08.00.03
huawei:e355_firmwarehuawei e355 firmwareeq21.157.37.01.910
huawei:e355huawei e355eqch1e355sm