← Back

CVE-2013-6031

nvd nist
Published: Mar 11, 2014Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:A/AC:M/Au:N/C:P/I:P/A:N
Exploitability: 5.5 / Impact: 4.9
Source: NVD

Description

The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.

Affected (2)

Huawei
2 products
E355 Firmware
E355
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
E355 Firmware
Version 21.157.37.01.910
E355
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

Source: cret@cert.org
US Government Resource
Source: cret@cert.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.