Huawei e355 vulnerabilities

2 CVEs affecting Huawei e355, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2968, published 2014-07-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6031, published 2014-03-11. Medium severity, CVSS 4.3. EPSS: 6.1% chance of exploitation in the next 30 days. The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information,…
CVE-2014-2968, published 2014-07-24. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary…