CVSS 3.1
4.2 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2021-40041
Medium (4.2) in huawei ws318n-21 firmware. EPSS 0.2% chance of exploitation in the next 30 days.
There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:ws318n-21_firmware