CVE-2013-2612: OS Command Injection
Published Jan 27, 2020
·Updated
Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI.
Affected Software
2 affected components
Huawei E587 Firmware=11.203.27
Huawei E587
Event History
Jan 27, 2020
CVE Published
via MITRE·09:58 PM
Data Sourced
via MITRE·09:58 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2612?
CVE-2013-2612 is categorized as a high severity vulnerability due to its potential for remote command execution with root privileges.
2
How do I fix CVE-2013-2612?
To mitigate CVE-2013-2612, update the Huawei E587 firmware to a version later than 11.203.27.
3
What type of attack can exploit CVE-2013-2612?
CVE-2013-2612 can be exploited through remote command injection attacks via the vulnerable Web UI.
4
Who is affected by CVE-2013-2612?
Users of Huawei E587 with firmware version 11.203.27 are affected by CVE-2013-2612.
5
What devices are vulnerable to CVE-2013-2612?
The Huawei E587 3G Mobile Hotspot running firmware version 11.203.27 is vulnerable to CVE-2013-2612.