Lucene search

K
nvd[email protected]NVD:CVE-2021-40041
HistoryJan 10, 2022 - 2:10 p.m.

CVE-2021-40041

2022-01-1014:10:23
CWE-79
web.nvd.nist.gov
1
cross-site scripting
huawei ws318n
information disclosure
network settings
cve-2021-40041
user input validation

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

5.1%

There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.

Affected configurations

NVD
Node
huaweiws318n-21Match-
AND
huaweiws318n-21_firmwareMatch10.0.2.2
OR
huaweiws318n-21_firmwareMatch10.0.2.5
OR
huaweiws318n-21_firmwareMatch10.0.2.6

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2021-40041