CVE-2009-2271

The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of…

published July 1, 2009

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

⚠️ Default passwords on the Huawei D100 make it a prime target for attackers — it’s like leaving the front door wide open and inviting intruders in! 🔓 Think of it as a hotel where every guest receives a room key that’s never changed — anyone with access to that key can waltz right into any room, no questions asked! This vulnerability allows attackers to easily access the device using default admin credentials, potentially giving them control over your network. With just the default password in hand, they could change settings, compromise sensitive information, or even launch attacks on other connected devices. It puts your entire setup at risk!

Put simply

Think of it as a hotel where every guest receives a room key that’s never changed — anyone with access to that key can waltz right into any room, no questions asked! The Huawei D100 has hardcoded default passwords for both the web and telnet interfaces, and it does not require users to change these upon setup, allowing attackers to gain unauthorized access.

What to do

This vulnerability allows attackers to easily access the device using default admin credentials, potentially giving them control over your network. With just the default password in hand, they could change settings, compromise sensitive information, or even launch attacks on other connected devices. It puts your entire setup at risk! Change the default administrator password immediately and establish a strong password policy. Ensure that the telnet interface is secured or disabled if not needed. Regularly audit your network devices for default settings to keep everything locked down! You've got this! By taking these steps, you’ll be turning your network into a fortress. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01313 · 70.5th percentile
Published
2009-07-01T12:26Z
EPSS history
Timeline
  • 01 JUL 12:26Z
    The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of…
    cvelistv5