Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2013-6031

The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.

CVSS 2.0 · 4.3 Medium EPSS 6.1% KEV · Not listed
Vendors
Huawei
Products
E355 E355 Firmware
CVE-2014-2968

Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
E355 E355 Firmware E355 Web Ui
CVE-2015-3912

Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attackers to obtain sensitive configuration information by sniffing the network or sending unspecified commands.

CVSS 2.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
E355s Mobile Wifi E355s Mobile Wifi Firmware Webui