First published: Wed Dec 03 2014(Updated: )
Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Honor Cube Wireless Router WS860s | <=v100r001c02b219 | |
Huawei Honor Cube Wireless Router WS860s |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-9134 is considered a high severity vulnerability due to its potential for remote code execution.
To fix CVE-2014-9134, ensure that you update the Huawei Honor Cube Wireless Router WS860s to a version later than V100R001C02B222.
CVE-2014-9134 is caused by an unrestricted file upload vulnerability that allows the execution of arbitrary code through uploaded files with executable extensions.
CVE-2014-9134 affects users of the Huawei Honor Cube Wireless Router WS860s versions up to V100R001C02B219.
Yes, CVE-2014-9134 can be exploited remotely by attackers who upload malicious files to the vulnerable device.