Approved changes feed: RSS · Atom

cpe:2.3:o:huawei:e355_firmware:21.157.37.01.910:*:*:*:*:*:*:*

part: o version: 21.157.37.01.910 update: *

VendorHuawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952)
ProductE355 Firmware (1bdbedcc-6126-5956-96e7-1b6ee00d00d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2968 vulnerable 2026-06-08 05:05:30.567549 Details available
Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T10:28:46.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6031 vulnerable 2026-06-08 05:04:55.206181 Details available
The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.
Published: 2014-03-11T01:00:00.000Z
Updated: 2024-08-06T17:29:42.972Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.