Huawei Webui vulnerabilities

2 CVEs affecting Huawei Webui, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3912, published 2015-05-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-2946, published 2014-06-02. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.858 allows remote attackers to hijack the…
CVE-2015-3912, published 2015-05-21. Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days. Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attackers to obtain sensitive configuration information by sniffing the network or…