CVE-2015-4629

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other…

published September 7, 2017

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

⚠️ A simple misconfiguration could turn your Huawei E5756S device into an open book! Remote attackers can read sensitive configuration details that could allow them to manipulate your settings. 🔍 Think of your device's settings as a recipe book left open on the kitchen table. An uninvited guest could sneak a peek and alter the ingredients, potentially ruining your dish! An attacker could easily read your configuration information, potentially enabling PIN/PUK authentication and performing other unspecified actions that could compromise your device's security. If they change your settings, it could lead to service disruptions or unauthorized access. This could be surprisingly sneaky!

Put simply

Think of your device's settings as a recipe book left open on the kitchen table. An uninvited guest could sneak a peek and alter the ingredients, potentially ruining your dish! This vulnerability allows remote attackers to access device configuration information due to inadequate protections in Huawei E5756S versions prior to V200R002B146D23SP00C00.

What to do

An attacker could easily read your configuration information, potentially enabling PIN/PUK authentication and performing other unspecified actions that could compromise your device's security. If they change your settings, it could lead to service disruptions or unauthorized access. This could be surprisingly sneaky! To protect your device, immediately update to the latest firmware version, V200R002B146D23SP00C00, and check your configuration settings to ensure they are secure. Disable remote access if unnecessary to minimize exposure. 🔒 You've got this! Follow these steps, and you'll have your device secured in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01717 · 77.1th percentile
Published
2017-09-07T20:00Z
EPSS history
Timeline
  • 07 SEP 20:00Z
    Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other…
    cvelistv5