Описание
There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:huawei:p40_firmware:10.1.0.118\(c00e116r3p3\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:p40:-:*:*:*:*:*:*:*
EPSS
Процентиль: 33%
0.00129
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-918
Связанные уязвимости
github
больше 3 лет назад
There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do.
EPSS
Процентиль: 33%
0.00129
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-918