PT-2013-57: Password Access in Huawei M2000

The specialists of the Positive Research center have detected a Password Access vulnerability in Huawei SGSN USN9810. The application stores and displays the FTP server password in clear text. This vulnerability allows the attackers to hijack the password and obtain access to the FTP server. How ...

PT-2013-55: Access Restrictions Bypassing in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an Access Restrictions Bypassing vulnerability in Huawei SGSN USN9810. The platform does not provide sufficient entropy in session identifiers. This allows an attacker to brute force the current ID to bypass the authorization mechanism...