CVE-2017-15312

Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device.

Score

CVSS 3.0 5.4 Medium

Status

Modified - psirt@huawei.com

Published

2017-12-22

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Smartcare (Huawei)
• Smartcare (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en