CVE-2009-2274
The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.
- Score
- CVSS 2.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2009-07-01
- Last modified
- 2024-08-07
- Weaknesses
- CWE-200
Affected products
References
- http://secunia.com/advisories/35638
- http://www.securityfocus.com/archive/1/504645/100/0/threaded
