CVE-2021-40041

There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings

published January 7, 2022

CVSS
—
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Published
2022-01-07T22:39Z
EPSS history
Timeline
  • 07 JAN 22:39Z
    There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings
    cvelistv5