CVE-2019-5243
MEDIUMHuawei HG255s Firmware - Clickjacking via Unrestricted UI Layer Rendering
Title source: llmDescription
There is a Clickjacking vulnerability in Huawei HG255s product. An attacker may trick user to click a link and affect the integrity of a device by exploiting this vulnerability.
References (2)
Core 2
Core References
Various Sources x_refsource_misc
https://utkusen.com/advisories/CVE-2019-5243.txt
Not Applicable, Vendor Advisory x_refsource_misc
https://support.huawei.com/carrier/navi?lang=en&coltype=software#col=software&detailId=PBI1-22976324&path=PBI1-7275726/PBI1-7275742/PBI1-22892608/PBI1-22903845/PBI1-21219153&lang=en
Scores
CVSS v3
4.3
EPSS
0.0010
EPSS Percentile
26.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Details
CWE
CWE-1021
Status
published
Products (1)
huawei/hg255s_firmware
Published
Jun 10, 2019
Tracked Since
Feb 18, 2026