CVE-2021-40041

There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.

• CWE-79

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211229-01-xss-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211229-01-xss-enVendor Advisory

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40035There is a Buffer overflow vulnerability due to a boundary e…7.5
• CVE-2021-40036The bone voice ID TA has a memory overwrite vulnerability. S…9.8
• CVE-2021-40037There is a Vulnerability of accessing resources using an inc…5.5
• CVE-2021-40038There is a Double free vulnerability in the AOD module in sm…7.5
• CVE-2021-40039There is a Null pointer dereference vulnerability in the cam…7.5
• CVE-2021-40040Vulnerability of writing data to an arbitrary address in the…7.5
• CVE-2021-40042There is a release of invalid pointer vulnerability in some …6.5
• CVE-2021-40043The laser command injection vulnerability exists on AIS-BW80…7.8
• CVE-2021-40044There is a permission verification vulnerability in the Blue…8.8
• CVE-2021-40045There is a vulnerability of signature verification mechanism…5.5
• CVE-2021-40046PCManager versions 11.1.1.95 has a privilege escalation vuln…9.8
• CVE-2021-40047There is a vulnerability of memory not being released after …7.5