CVE-2015-8673: Medium severity huawei te30 firmware vulnerability
Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8673?
CVE-2015-8673 is classified as a high severity vulnerability due to the potential for unauthorized access.
How do I fix CVE-2015-8673?
To mitigate CVE-2015-8673, upgrade the firmware of your Huawei TE30, TE40, TE50, or TE60 devices to V100R001C10SPC100 or later.
What type of attacks can exploit CVE-2015-8673?
CVE-2015-8673 can be exploited by physically proximate attackers who can access unattended devices.
Which Huawei products are affected by CVE-2015-8673?
CVE-2015-8673 affects Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints.
Is a user authentication required to change the password for the Debug account in CVE-2015-8673?
No, CVE-2015-8673 allows changing the password for the Debug account without requiring the old password.