CVE-2016-6159

CVE-2016-6159 affects Huawei WS331a routers; prior to WS331a-10 V100R001C01B112, the management interface could be bypassed via sending specially crafted packages to the LAN interface, allowing remote attackers to gain administrative access. The issue is tied to improper handling during authentic...

CVE-2016-6158

CVE-2016-6158 concerns Huawei WS331a routers running software before WS331a-10 V100R001C01B112. The vulnerability is a Cross-Site Request Forgery (CSRF) in the management interface that lets an unauthenticated attacker cause actions like restoring factory settings or rebooting the device by issui...