Huawei d100 Firmware vulnerabilities

2 CVEs affecting Huawei d100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2273, published 2009-07-01.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-2273, published 2009-07-01. Medium severity, CVSS 5.0. EPSS: 0.7% chance of exploitation in the next 30 days. The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
• CVE-2009-2272, published 2009-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file,…