CVE-2014-2968 Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary w...
MediumCVSS 4.3
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei e355 web ui | = 11.001.08.00.03 | No fix listed |
| Huawei e355 firmware | = 21.157.37.01.910 | No fix listed |
| Huawei e355 | = ch1e355sm | No fix listed |
References
- VU#688812 third-party-advisory us-government-resource