CVE-2009-2274: Huawei d100

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.

Affected products

• Huawei d100: affected versions not specified

Published 2009-07-01. Last modified 2026-06-16.