CVE-2013-6031
Last modified
CVE-2013-6031 is a vulnerability of currently unknown severity. The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.. EPSS estimates a 6.08% chance of exploitation in the next 30 days.
Description
The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | E355 Firmware | 21.157.37.01.910 |
| Huawei | E355 | All versions |
References
- http://www.kb.cert.org/vuls/id/341526US Government Resource
- http://www.kb.cert.org/vuls/id/341526US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-6031?
How severe is CVE-2013-6031?
How do I fix CVE-2013-6031?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-6025The XMLParse procedure in SAP Sybase Adaptive Server Enterpr…
- CVE-2013-6026The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-52…
- CVE-2013-6027Stack-based buffer overflow in the RuntimeDiagnosticPing fun…
- CVE-2013-6028Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2013-6029Stack-based buffer overflow in the AT&T Connect Participant …
- CVE-2013-6030Directory traversal vulnerability on the Emerson Network Pow…
- CVE-2013-6032cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark…
- CVE-2013-6033Multiple cross-site scripting (XSS) vulnerabilities on Lexma…
- CVE-2013-6034The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BG…
- CVE-2013-6035The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BG…
- CVE-2013-6037Cross-site scripting (XSS) vulnerability in index.php in Ake…
- CVE-2013-6038Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.…
Are you affected by CVE-2013-6031?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST