CVE-2009-4197

Exploit

EPSS 0.04%
Veröffentlicht 04.12.2009 11:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Mt882 Modem Firmware Version3.7.9.98

Huawei ≫ Mt882 Modem Versionv100r002b020_arg-t

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.7	3.4	6.9	AV:L/AC:M/Au:N/C:C/I:N/A:N

http://www.exploit-db.com/exploits/10276

Exploit

http://www.securityfocus.com/bid/37194

https://exchange.xforce.ibmcloud.com/vulnerabilities/54528

https://nvd.nist.gov/vuln/detail/CVE-2009-4197

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4197

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4197

EUVD