CVE-2014-9134

Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2014-12-03

Last modified

2024-08-06

Affected products

• Honor Cube Wireless Router Ws860s (Huawei)
• Honor Cube Wireless Router Ws860s Firewall (Huawei)

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-396206.htm
• http://www.securityfocus.com/bid/69806