PT-2015-6345 · Huawei · Huawei E355S Mobile Wifi

Evilsocket · Publicado 2015-05-21 · Atualizado 2015-05-22 · CVE-2015-3912

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei E355s Mobile WiFi with firmware prior to 22.158.45.02.625 Huawei E355s Mobile WiFi with WEBUI prior to 13.100.04.01.625

Description The issue allows remote attackers to obtain sensitive configuration information. This can be achieved by either sniffing the network or sending unspecified commands.

Recommendations For Huawei E355s Mobile WiFi with firmware prior to 22.158.45.02.625, update the firmware to version 22.158.45.02.625 or later. For Huawei E355s Mobile WiFi with WEBUI prior to 13.100.04.01.625, update the WEBUI to version 13.100.04.01.625 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-3912

Produtos afetados

Huawei E355S Mobile Wifi

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-3912 · Nota de Segurança
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-425435.htm · Aviso do Fabricante
• http://securityfocus.com/bid/74397 · Nota