CVEvulnerability
CVE-2009-4197
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
Description
rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.
Affected configurations
• huawei mt882 modem firmware 3.7.9.98
• huawei mt882 modem v100r002b020 arg-t
References
- http://www.exploit-db.com/exploits/10276 Exploit
- http://www.securityfocus.com/bid/37194 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54528 exchange.xforce.ibmcloud.com
- http://www.exploit-db.com/exploits/10276 Exploit
- http://www.securityfocus.com/bid/37194 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54528 exchange.xforce.ibmcloud.com