Detections
Analytics

Multiple XSRF Vulnerabilities in Huawei Products (HWPSIRT-2014-0406)

medium Nessus Plugin ID 80087

Language:

Synopsis

The remote host is affected by multiple cross-site request forgery vulnerabilities.

Description

The remote Huawei device is running a firmware version that is affected by multiple cross-site request forgery vulnerabilities in the web interface.

Solution

Apply the appropriate patch per the vendor's advisory.

See Also

http://www.nessus.org/u?de58c16b

Plugin Details

Severity: Medium

ID: 80087

File Name: huawei-SA-20140924-02-CSRF.nasl

Version: 1.8

Type: remote

Published: 12/17/2014

Updated: 1/6/2021

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: Settings/ParanoidReport, Host/Huawei/VSP/Series, Host/Huawei/VSP/Version, Host/Huawei/VSP/Model

Exploit Ease: No known exploits are available

Patch Publication Date: 9/24/2014

Vulnerability Publication Date: 9/24/2014

Reference Information

BID: 70114