Huawei MT882 Cross Site Scripting and Information Disclosure Vulnerabilities
BID:37194
Info
Huawei MT882 Cross Site Scripting and Information Disclosure Vulnerabilities
| Bugtraq ID: | 37194 |
| Class: | Unknown |
| CVE: |
CVE-2009-4196 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2009 12:00AM |
| Updated: | Apr 13 2015 09:05PM |
| Credit: | DecodeX01 |
| Vulnerable: |
Huawei MT882 3.7.9.98 |
| Not Vulnerable: | |
Discussion
Huawei MT882 Cross Site Scripting and Information Disclosure Vulnerabilities
Huawei MT882 is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. The attacker may also obtain sensitive information.
Huawei MT882 firmware 3.7.9.98 is vulnerable; other versions may also be affected.
Huawei MT882 is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. The attacker may also obtain sensitive information.
Huawei MT882 firmware 3.7.9.98 is vulnerable; other versions may also be affected.
Exploit / POC
Huawei MT882 Cross Site Scripting and Information Disclosure Vulnerabilities
Attackers may exploit these issues via a browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting victim into following a malicious URI.
Attackers may exploit these issues via a browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Huawei MT882 Cross Site Scripting and Information Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Huawei MT882 Cross Site Scripting and Information Disclosure Vulnerabilities
References:
References:
- Huawei Technologies Homepage (Huawei Technologies)