Lucene search
HistoryJul 01, 2009 - 1:00 p.m.
CVE-2009-2274
huawei
d100
remote
information disclosure
cve-2009-2274
javascript
nvd
6.3 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.004 Low
EPSS
Percentile
74.0%
The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.
Affected configurations
Node
huaweid100Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| huawei:d100 | huawei d100 | eq | - |
Related
nvd
nvd
CVE-2009-2274
2009-07-01 13:00:01
prion
prion
Information disclosure
2009-07-01 13:00:00
cvelist
cvelist
CVE-2009-2274
2009-07-01 12:26:00
6.3 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.004 Low
EPSS
Percentile
74.0%
Related for CVE-2009-2274