Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2016-01-12T20:00:00
Updated: 2016-01-12T19:57:02
Reserved: 2015-12-25T00:00:00
Link: CVE-2015-8673
JSON object: View
NVD Information
Status : Analyzed
Published: 2016-01-12T20:59:06.560
Modified: 2016-01-20T08:15:59.810
Link: CVE-2015-8673
JSON object: View
Redhat Information
No data.
CWE