PT-2009-4707 · Huawei · Huawei D100

Published 2009-07-01 · Updated 2018-10-10 · CVE-2009-2271

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei D100 (affected versions not specified)

Description The issue concerns default passwords for administrator accounts. Specifically, the web interface has a default administrator password and does not enforce a password change, while the telnet interface uses a default password of admin for the admin account. This makes it easier for remote attackers to gain access.

Recommendations For the Huawei D100, change the default administrator password for the web interface and update the telnet interface admin account password to a strong, unique password to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-2271

Affected Products

Huawei D100

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-2271 · Security Note
• http://securityfocus.com/archive/1/504645/100/0/threaded · Note
• http://secunia.com/advisories/35638 · Note