Authentication flaw

2016-09-2114:25:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.5%

JSON

The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending “special packages” to the LAN interface.

CPENameOperatorVersion
ws331a_router_firmwareeq<= ws331a10v100r1c2b17sp1

CPE	Name	Operator	Version
	ws331a_router_firmware	eq	<= ws331a10v100r1c2b17sp1

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en