Read the docs
TI-2016-05285 Aliases CVE-2016-6159GHSA-74g5-3h38-r7hj

The management interface of Huawei WS331a routers with software before WS331a-10…

Priority LOW 35CWE-287Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special packages" to the LAN interface.

Why it matters now

EPSS 0.01093 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:huawei:ws331a_router_firmware:*:*:*:*:*:*:*:*up to ws331a-10_v100r001c02b017sp01VulnerableHuawei
cpe:2.3:h:huawei:ws331a_router:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:ws331a_router_firmware:*:*:*:*:*:*:*:* Versions up to ws331a-10_v100r001c02b017sp01 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:ws331a_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-6159
  2. 2026-10-03 Alias added: GHSA-74g5-3h38-r7hj

References

Other 1

  • TI-2016-05284 Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with… CVSS 3.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences