PT-2009-4707 · Huawei · Huawei D100

Publicado 2009-07-01 · Atualizado 2018-10-10 · CVE-2009-2271

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei D100 (affected versions not specified)

Description The issue concerns default passwords for administrator accounts. Specifically, the web interface has a default administrator password and does not enforce a password change, while the telnet interface uses a default password of admin for the admin account. This makes it easier for remote attackers to gain access.

Recommendations For the Huawei D100, change the default administrator password for the web interface and update the telnet interface admin account password to a strong, unique password to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-2271

Produtos afetados

Huawei D100

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-2271 · Nota de Segurança
• http://securityfocus.com/archive/1/504645/100/0/threaded · Nota
• http://secunia.com/advisories/35638 · Nota