CVE-2019-5243

Опубликовано: 10 июн. 2019

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

There is a Clickjacking vulnerability in Huawei HG255s product. An attacker may trick user to click a link and affect the integrity of a device by exploiting this vulnerability.

Ссылки

https://support.huawei.com/carrier/navi?lang=en&coltype=software#col=software&detailId=PBI1-22976324&path=PBI1-7275726/PBI1-7275742/PBI1-22892608/PBI1-22903845/PBI1-21219153&lang=en
Not Applicable
Vendor Advisory
https://utkusen.com/advisories/CVE-2019-5243.txt
https://support.huawei.com/carrier/navi?lang=en&coltype=software#col=software&detailId=PBI1-22976324&path=PBI1-7275726/PBI1-7275742/PBI1-22892608/PBI1-22903845/PBI1-21219153&lang=en
Not Applicable
Vendor Advisory
https://utkusen.com/advisories/CVE-2019-5243.txt

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:hg255s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:huawei:hg255s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00096

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-1021

Связанные уязвимости

GHSA-g58j-rq8j-3rhv

github

больше 3 лет назад

There is a Clickjacking vulnerability in Huawei HG255s product. An attacker may trick user to click a link and affect the integrity of a device by exploiting this vulnerability.

EPSS

Процентиль: 27%

0.00096

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-1021