PT-2014-4974

Name of the Vulnerable Software and Affected Versions Huawei E303 modems with software 22.157.18.00.858 Huawei Web UI version 11.010.06.01.858 Description A cross-site request forgery CSRF issue exists in the api/sms/send-sms endpoint of the Web UI, allowing remote attackers to hijack administrat...

CVE-2014-2946: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.858 allows remote attackers to hijack the authentication of administrators for requests that perform API operations and send SMS messages via a request...