CVE-2016-6158 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities affecting Huawei WS331a routers running software versions prior to WS331a-10 V100R001C01B112. These flaws allow remote attackers to hijack an authenticated administrator's session to perform actions such as restoring factory settings or rebooting the device. With a CVSS v3 score of 6.1 (Medium), exploitation requires user interaction and high privileges, but can lead to high impact on integrity and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
ws331a-10_v100r001c02b017sp01CPE matchmatch criteria | cpe:2.3:o:huawei:ws331a_router_firmware:ws331a-10_v100r001c02b017sp01:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.