CVE-2014-9134

2014-12-0321:59:01

[email protected]

web.nvd.nist.gov

huawei

honor cube

wireless router

vulnerability

cve-2014-9134

nvd

security

unrestricted file upload

remote code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

JSON

Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Affected configurations

NVD

Node

huaweihonor_cube_wireless_router_ws860s_firewallRange≤v100r001c02b219

AND

huaweihonor_cube_wireless_router_ws860sMatch-

CPENameOperatorVersion
huawei:honor_cube_wireless_router_ws860s_firewallhuawei honor cube wireless router ws860s firewalllev100r001c02b219
huawei:honor_cube_wireless_router_ws860shuawei honor cube wireless router ws860seq-

CPE	Name	Operator	Version
huawei:honor_cube_wireless_router_ws860s_firewall	huawei honor cube wireless router ws860s firewall	le	v100r001c02b219
huawei:honor_cube_wireless_router_ws860s	huawei honor cube wireless router ws860s	eq	-