CVE-2025-49599

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-49599

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...

PT-2025-24311 · Huawei · Huawei Eg8145V5 +2

Name of the Vulnerable Software and Affected Versions: Huawei EG8141A5 versions through V5R019C00S100 Huawei EG8145V5 versions through V5R019C00S100 Huawei EG8145V5-V2 versions through V5R021C00S184 Description: The issue allows the Epuser account to disable ONT firewall functionality. This can b...

CVE-2025-49599

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...

Huawei’s various products have security vulnerabilities

Huaweiu202fEG8141A5 and others are a routed fiber access device from Huawei China. A security vulnerability exists in various Huawei products, which stems from the ability of an Epuser account to disable the ONT firewall feature, which may result in the removal of the default SSH and TELNET TCP...

CVE-2025-49599

CVE-2025-49599 affects Huawei ONT gateway devices: EG8141A5 (V5R019C00S100 and earlier), EG8145V5 (V5R019C00S100 and earlier), and EG8145V5-V2 (V5R021C00S184 and earlier). The issue allows the Epuser account to disable the ONT firewall, removing default blocking of SSH/TELNET ports. Connected sou...

CVE-2025-49599

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...

TOTOLINK A3002RU Firewall XSS

The vulnerability of the IP/Port Filtering configuration of the Firewall module in TOTOLINK A3002RU microprogrammed router software is related to the lack of protection for the website structure when processing the Comment parameter. Exploiting this vulnerability allows a remote attacker to perfo...

TOTOLINK A3002RU MAC Filtering XSS

The vulnerability of the MAC filtering configuration in the TOTOLINK A3002RU router’s microprogrammed software firewall module is related to the lack of protection for the website structure when processing the “Comment” parameter. Exploiting this vulnerability allows a remote attacker to perform...

CVE-2025-49599: Incorrect Authorization

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...

Totolink X2000R XSS

The vulnerability of the URL filtering configuration of the Totolink X2000R router software module is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...

CVE-2025-22244

CVE-2025-22244 is a stored XSS in VMware NSX gateway firewall caused by improper input validation. Connected advisories confirm multiple NSX components are affected (gateway firewall among others) and provide fixed versions: NSX 4.2.2.1, NSX 4.2.1.4, and NSX 4.1.2.6 (and related NSX-T/Cloud Found...

PT-2025-23844 · Vmware · Vmware Nsx

Name of the Vulnerable Software and Affected Versions: VMware NSX affected versions not specified Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability in the gateway firewall of VMware NSX, caused by improper input validation. This allows for malicious scripts to b...

PT-2025-23877 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version 1.10CNB05 Description: The issue is related to a stack-based buffer overflow in the QoSPortSetup function of the /goform/QoSPortSetup file. This can be exploited remotely by manipulating the port0 group, port0 remarker,...

CVE-2025-22244: Improper Neutralization of Input During Web Page Generation

VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...