Huawei Datacard Information Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' class MetasploitModule /./i, 'Serial Number' = /./i, 'IMEI' = /./i, 'IMSI' = /./i, 'ICCID' = /./i, 'Hardware Version' = /./i, 'Software Version' = /./i,...

Huawei Datacard Information Disclosure Vulnerability

This module exploits an unauthenticated information disclosure vulnerability in Huawei SOHO routers. The module will gather information by accessing the /api pages where authentication is not required, allowing configuration changes as well as information disclosure, including any stored SMS. Thi...

CVE-2013-6031

CVE-2013-6031 affects Huawei E355 datacard/SOHO router with firmware 21.157.37.01.910. The issue is unauthenticated access to API endpoints (api/wlan/security-settings, api/device/information, api/wlan/basic-settings, api/wlan/mac-filter, api/monitoring/status, api/dhcp/settings) allowing remote ...