PT-2025-24311 · Huawei · Huawei Eg8145V5-V2+2

Published 2025-06-06 · Updated 2025-06-07 · CVE-2025-49599

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Huawei EG8141A5 versions through V5R019C00S100 Huawei EG8145V5 versions through V5R019C00S100 Huawei EG8145V5-V2 versions through V5R021C00S184

Description The issue allows the Epuser account to disable ONT firewall functionality. This can be used to remove the default blocking of the SSH and TELNET TCP ports.

Recommendations For Huawei EG8141A5 versions through V5R019C00S100, restrict access to the Epuser account to prevent disabling of the ONT firewall functionality. For Huawei EG8145V5 versions through V5R019C00S100, restrict access to the Epuser account to prevent disabling of the ONT firewall functionality. For Huawei EG8145V5-V2 versions through V5R021C00S184, restrict access to the Epuser account to prevent disabling of the ONT firewall functionality. As a temporary workaround, consider blocking the SSH and TELNET TCP ports at the network level to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-10365

CVE-2025-49599

Affected Products

Huawei Eg8141A5

Huawei Eg8145V5

Huawei Eg8145V5-V2

References · 8

• 🔥 https://youtube.com/watch?v=l1eYpcNvZdQ · Exploit
• https://bdu.fstec.ru/vul/2025-10365 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-49599 · Security Note
• https://twitter.com/transilienceai/status/1931191988721741906 · Twitter Post
• https://t.me/cvetracker/25658 · Telegram Post
• https://twitter.com/CVEnew/status/1931127884405694601 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1931135074889601280 · Twitter Post
• https://twitter.com/transilienceai/status/1931191992706388466 · Twitter Post