CVE-2009-2272: High severity huawei d100 vulnerability
The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2272?
CVE-2009-2272 is considered to be a high severity vulnerability due to the exposure of sensitive information.
How do I fix CVE-2009-2272?
To fix CVE-2009-2272, it is recommended to update the Huawei D100 router firmware to a version that does not store credentials in cleartext.
What kind of information is exposed by CVE-2009-2272?
CVE-2009-2272 exposes the administrator's account name and password stored in a cookie.
Who is affected by CVE-2009-2272?
Users of the Huawei D100 router and its associated firmware versions are affected by CVE-2009-2272.
What are the potential attack vectors for CVE-2009-2272?
Potential attack vectors for CVE-2009-2272 include reading cookie files and network sniffing for HTTP headers.