PT-2015-6344 · Huawei · Huawei E587 Mobile Wifi

Evilsocket · Published 2015-05-21 · Updated 2015-05-22 · CVE-2015-3911

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Huawei E587 Mobile WiFi versions prior to 11.203.30.00.00

Description The issue allows remote attackers to bypass authentication, change configurations, send messages, and cause a denial of service (device restart) via unspecified vectors.

Recommendations For versions prior to 11.203.30.00.00, update the firmware to version 11.203.30.00.00 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-3911

Affected Products

Huawei E587 Mobile Wifi

References · 3

• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-425408.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3911 · Security Note
• http://securityfocus.com/bid/74434 · Note