NVD

Id
41233  
Name
CVE-2013-6031  
Description
The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-03-11  
Modified Date
2014-03-11  
Seq
2013-6031  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
208731 41233 CVE-2013-6031 VU#341526  View
208732 41233 CVE-2013-6031 https://github.com/aczire/huawei-csrf-info_disclosure/blob/master/huawei_wifi_info.rb  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12714 JVNDB-2014-001589 Huawei E355 に認証回避の脆弱性 Huawei が提供する E355 には、認証なしで情報の閲覧や設定の変更が可能な脆弱性 (CWE-425) が存在します。 CVE-2013-6031 65973 CVE-2013-6031 41233 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001589.html 2014-03-06 2014-03-12 View