VYPR

D100 Firmware

by Huawei

CVEs (2)

  • CVE-2009-2272HigJul 1, 2009
    risk 0.49cvss 7.5epss 0.01

    The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified…

  • CVE-2009-2273Jul 1, 2009
    risk 0.00cvss epss 0.01

    The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.