CVE-2014-9134

Huawei Honor Cube Wireless Router WS860s (before V100R001C02B222) has an Unrestricted file upload vulnerability (CVE-2014-9134) that enables remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The advisory HWPS...

Security Advisory-File Upload Vulnerability on Huawei Honor Cube Wireless Router WS860s

Huawei Honor Cube wireless router WS860s supports the file upload function. It allows users to access its files through the web page. As the device is unable to verify every type of file to be uploaded and does not strictly restrict the file access path through the web page, attackers may upload...