CVE-2016-8789

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-02 · updated 2026-06-17
Weakness: CWE-79

Description

Huawei eSpace Integrated Access Device (IAD) with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS.

Affected products

eSpace IAD V300R001C03, V300R001C04, V300R001C06, V300R001C20 and V300R001C07: v300r001c03, v300r001c04, v300r001c06, v300r001c07, v300r001c20

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-espace-en
http://www.securityfocus.com/bid/94613
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-espace-en
http://www.securityfocus.com/bid/94613

Get alerted when CVE-2016-8789 or the next vulnerability affects your stack