CVE-2014-2968

Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message.

• CWE-79

• http://www.kb.cert.org/vuls/id/688812Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/688812Third Party Advisory, US Government Resource

Published

Jul 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2962Absolute path traversal vulnerability in the webproc cgi mod…
• CVE-2014-2963Multiple cross-site scripting (XSS) vulnerabilities in group…
• CVE-2014-2964Cobham Aviator 700D and 700E satellite terminals have hardco…
• CVE-2014-2965Cross-site scripting (XSS) vulnerability in auth-settings-x.…
• CVE-2014-2966The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not p…
• CVE-2014-2967Autodesk VRED Professional 2014 before SR1 SP8 allows remote…
• CVE-2014-2969NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 …
• CVE-2014-2970Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-2971Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp…
• CVE-2014-2972expand.c in Exim before 4.83 expands mathematical comparison…
• CVE-2014-2973Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-2974Cross-site request forgery (CSRF) vulnerability in php/user_…