PT-2015-6344 · Huawei · Huawei E587 Mobile Wifi

Evilsocket · Publicado 2015-05-21 · Atualizado 2015-05-22 · CVE-2015-3911

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Huawei E587 Mobile WiFi versions prior to 11.203.30.00.00

Description The issue allows remote attackers to bypass authentication, change configurations, send messages, and cause a denial of service (device restart) via unspecified vectors.

Recommendations For versions prior to 11.203.30.00.00, update the firmware to version 11.203.30.00.00 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-3911

Produtos afetados

Huawei E587 Mobile Wifi

Referências · 3

• http://securityfocus.com/bid/74434 · Nota
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-425408.htm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3911 · Nota de Segurança