CVE-2021-40041
4.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Exploitability: 1.1 / Impact: 2.7
Source: NVD
Description
There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.
Affected (3)
Products: Huawei: Ws318n 21 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0.2.2 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ws318n 21 | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.