CVE-2016-8789

Published: Apr 2, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Huawei eSpace Integrated Access Device (IAD) with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS.

Affected (5)

Products: Huawei: Espace Integrated Access Device Firmware

Huawei

1 product

Espace Integrated Access Device Firmware

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Espace Integrated Access Device Firmware	Version v300r001c03
Huawei Espace Integrated Access Device Firmware	Version v300r001c04
Huawei Espace Integrated Access Device Firmware	Version v300r001c06
Huawei Espace Integrated Access Device Firmware	Version v300r001c07
Huawei Espace Integrated Access Device Firmware	Version v300r001c20