CVE-2016-6158

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that (1) restore factory settings or (2) reboot the device via unspecified vectors.

Date published : 2016-09-21

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en