PT-2016-3944 · Huawei · Te30+3

Publicado 2016-01-12 · Atualizado 2016-01-20 · CVE-2015-8673

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei TE30, TE40, TE50, and TE60 versions prior to V100R001C10SPC100

Description The issue allows physically proximate attackers to change the password for the Debug account by leveraging an unattended workstation, as the old password is not required when changing the password.

Recommendations For versions prior to V100R001C10SPC100, update to V100R001C10SPC100 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-8673

Produtos afetados

Te30

Te40

Te50

Te60

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8673 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/hw-462952 · Nota