Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

web_app:weaver_e-mobile_ssrf（Rule ID：1070210523）

Release Date：2025/9/15

Rule Name：Weaver E-Mobile Server-Side Request Forgery Vulnerability

Severity：high

CVE ID：

Descripiton：

Weaver E-Mobile is a mobile office portal launched by Weaver, which connects e-cology processes, documents and meetings with one click, enabling enterprises to carry their business with them. The SSRF vulnerability in Weaver E-Mobile can allow attackers to scan the intranet, read local files or trigger internal services with the help of the server, resulting in information disclosure, service paralysis and even horizontal movement.This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.