Improper input validation in Huawei E585
CVE-2012-5968
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.004 (35.1th percentile) — read the EPSS interpretation.
Affected products
- Huawei E585
- Huawei E585u-82
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)