CVE-2014-2946
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-2946
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.858 allows remote attackers to hijack the authentication of administrators for requests that perform API operations and send SMS messages via a request element in an XML document.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Huawei E303调制解调器跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei E303 modems是中国华为（Huawei）公司的一款无线宽带调制解调器产品。 使用22.157.18.00.858版本软件的Huawei E303调制解调器的Web UI 11.010.06.01.858版本中的api/sms/send-sms URL存在跨站请求伪造漏洞。远程攻击者可通过发送特制的请求利用该漏洞执行API操作，发送SMS消息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-2946
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-2946
请登录查看更多情报信息。
Same Patch Batch · n/a · 2014-06-02 · 31 CVEs total
| CVE-2013-3476 | WordPress Related Posts插件跨站请求伪造漏洞 | |
| CVE-2014-3935 | XOOPS Glossaire模块SQL注入漏洞 | |
| CVE-2014-3934 | PHP-Nuke Submit_News模块SQL注入漏洞 | |
| CVE-2014-3933 | Drupal AddressField Tokens模块跨站脚本漏洞 | |
| CVE-2014-3932 | CoSoSys Endpoint Protector SQL注入漏洞 | |
| CVE-2014-3936 | 多款D-Link产品缓冲区错误漏洞 | |
| CVE-2014-3937 | WordPress Contextual Related Posts插件SQL注入漏洞 | |
| CVE-2014-0042 | Red Hat Enterprise Linux 加密问题漏洞 | |
| CVE-2014-0041 | Red Hat Enterprise Linux 加密问题漏洞 | |
| CVE-2014-0040 | Red Hat Enterprise Linux 安全漏洞 | |
| CVE-2013-7387 | DataLife Engine 会话固定漏洞 | |
| CVE-2013-7386 | BOINC‘PROJECT::write_account_file’函数格式化字符串漏洞 | |
| CVE-2013-6470 | Red Hat Enterprise Linux OpenStack Platform 授权问题漏洞 | |
| CVE-2013-6433 | Red Hat openstack-neutron 权限许可和访问控制漏洞 | |
| CVE-2013-4596 | Drupal Node Access Keys模块访问绕过漏洞 | |
| CVE-2014-2939 | Alfresco Enterprise 跨站脚本漏洞 | |
| CVE-2013-3258 | WordPress Digg Digg插件跨站请求伪造漏洞 | |
| CVE-2013-3257 | WordPress Related Posts插件跨站请求伪造漏洞 | |
| CVE-2013-2710 | WordPress Contextual Related Posts插件跨站请求伪造漏洞 | |
| CVE-2013-2298 | BOINC 基于栈的缓冲区溢出漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-2946
No comments yet