PT-2015-6345 · Huawei · Huawei E355S Mobile Wifi

Evilsocket · Published 2015-05-21 · Updated 2015-05-22 · CVE-2015-3912

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei E355s Mobile WiFi with firmware prior to 22.158.45.02.625 Huawei E355s Mobile WiFi with WEBUI prior to 13.100.04.01.625

Description The issue allows remote attackers to obtain sensitive configuration information. This can be achieved by either sniffing the network or sending unspecified commands.

Recommendations For Huawei E355s Mobile WiFi with firmware prior to 22.158.45.02.625, update the firmware to version 22.158.45.02.625 or later. For Huawei E355s Mobile WiFi with WEBUI prior to 13.100.04.01.625, update the WEBUI to version 13.100.04.01.625 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-3912

Affected Products

Huawei E355S Mobile Wifi

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-3912 · Security Note
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-425435.htm · Vendor Advisory
• http://securityfocus.com/bid/74397 · Note