PT-2016-3944 · Huawei · Te30+3

Published 2016-01-12 · Updated 2016-01-20 · CVE-2015-8673

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei TE30, TE40, TE50, and TE60 versions prior to V100R001C10SPC100

Description The issue allows physically proximate attackers to change the password for the Debug account by leveraging an unattended workstation, as the old password is not required when changing the password.

Recommendations For versions prior to V100R001C10SPC100, update to V100R001C10SPC100 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2015-8673

Affected Products

Te30

Te40

Te50

Te60

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8673 · Security Note
• http://huawei.com/en/psirt/security-advisories/hw-462952 · Note