CVE-2009-2274

The vulnerability CVE-2009-2274 affects the Huawei D100 router. An attacker can remotely obtain sensitive information by making direct requests to en/ lan_status_adv.asp, wlan_basic_cfg.asp, or lancfg.asp, related to the use of JavaScript to protect reading file contents. The root cause is descri...

CVE-2009-2271

The CVE-2009-2271 entry concerns the Huawei D100, where (1) a default administrator password for the web interface is not forced to be changed, and (2) the admin account in the Telnet interface uses the default password “admin.” This combination enables remote attackers to obtain access. The exis...