CVE-2016-8789: Huawei Espace Integrated Access Device Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Huawei eSpace Integrated Access Device (IAD) with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS.

Affected products

• Huawei Espace Integrated Access Device Firmware: version v300r001c03 only; version v300r001c04 only; version v300r001c06 only; version v300r001c07 only; version v300r001c20 only

Published 2017-04-02. Last modified 2026-06-17.