CVE-2014-5395 - CVE House
Back to Database
Status published Medium CVE-2014-5395

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users for requests that (1) modify configurations, (2) send SMS messages, or have other unspecified impact via unknown vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5395

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation...
Medium 6.2
CVE-2021-40042
There is a release of invalid pointer vulnerability in some...
Medium 6.5
CVE-2021-40033
There is an information exposure vulnerability on several Huawei Products....
Medium 5.5
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...
High 8.8
CVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...
High 7.8

Affected Vendor

Affected Software

e5180s-22 firmware, e3276 firmware, e3236 firmware, e586bs-2 firmware
Vulnerable Versions:
0

Timeline

Official Publish: November 21st, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.