EUVD-2016-7092

Malware in sbrugna...

CVE-2016-6159

The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special packages" to the LAN interface...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

PT-2016-6777

Name of the Vulnerable Software and Affected Versions Huawei WS331a versions prior to V100R001C01B112 Description The issue affects Huawei WS331a routers, allowing remote attackers to hijack the authentication of administrators. This can be done through cross-site request forgery CSRF...

PT-2016-6778

Name of the Vulnerable Software and Affected Versions Huawei WS331a versions prior to WS331a-10 V100R001C01B112 Description The issue allows remote attackers to bypass authentication and obtain administrative access by sending special packages to the LAN interface. Recommendations For versions...

CVE-2016-6159: Improper Authentication

The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special packages" to the LAN interface...

CVE-2016-6158: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

Huawei WS331a Cross-Site Request Forgery Vulnerability

The Huawei WS331a is a mini wireless router from the Chinese company Huawei. The Huawei WS331a suffers from a cross-site request forgery vulnerability that allows a remote attacker to construct a malicious URI, trick the user into parsing it, and can perform malicious actions in the context of th...

Huawei WS331a Certificate Management Vulnerability

The Huawei WS331a is a mini wireless router from Huawei China. A certificate management vulnerability exists in Huawei WS331a WS331a-10 V100R001C02B017SP01 and earlier versions. Due to the program failing to properly handle password validation. An attacker could exploit this vulnerability by...