Back to Database
Status published
Medium
CVE-2017-15312
Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability...
Vulnerability Description
Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-15312
Credits & Attribution
No credits recorded in the NVD database.
More from Huawei Technologies Co., Ltd.
View All →CVE-2018-7994
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10;...
High
7.5
CVE-2018-7993
HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311...
High
7.8
CVE-2018-7992
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro...
Medium
5.5
CVE-2018-7991
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have...
Medium
4.6
CVE-2018-7990
Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00)...
Medium
4.6
Affected Vendor
Huawei Technologies Co., Ltd.
View all reports →Affected Software
SmartCare
Vulnerable Versions:
V200R003C10
Timeline
Official Publish:
December 22nd, 2017
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.