GCVE - cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Huawei (`1cc7ae8f-602e-5c48-b475-b8c42c69e952`)
Product	D100 (`faba6c51-c992-52c8-b817-ad5d960b0078`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2274`	vulnerable	2026-06-08 04:51:27.468983	Details available The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents. Published: 2009-07-01T12:26:00.000Z Updated: 2024-08-07T05:44:55.941Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/504645/100/0/threaded http://secunia.com/advisories/35638	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2273`	not_vulnerable	2026-06-08 04:51:27.468696	Details available The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Published: 2009-07-01T12:26:00.000Z Updated: 2024-08-07T05:44:55.604Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/504645/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2272`	not_vulnerable	2026-06-08 04:51:27.468330	Details available The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors. Published: 2009-07-01T12:26:00.000Z Updated: 2024-08-07T05:44:55.634Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/504645/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2271`	vulnerable	2026-06-08 04:51:27.467086	Details available The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access. Published: 2009-07-01T12:26:00.000Z Updated: 2024-08-07T05:44:55.932Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/504645/100/0/threaded http://secunia.com/advisories/35638	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.