Huawei d100 vulnerabilities

2 CVEs affecting Huawei d100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2274, published 2009-07-01.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-2271, published 2009-07-01. High severity, CVSS 10.0. EPSS: 1.3% chance of exploitation in the next 30 days. The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the…
• CVE-2009-2274, published 2009-07-01. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript…