CVE-2009-4197

Published: Dec 4, 2009Modified: Apr 23, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.

Affected (2)

Products: Huawei: Mt882 Modem Firmware, Mt882 Modem

2 products

Mt882 Modem Firmware

Configuration A

1 platform

Running on/with	Platform Versions
Huawei Mt882 V100t002b020 Arg T	Version firmware_3.7.9.98

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Huawei Mt882 Modem Firmware	Version 3.7.9.98
Huawei Mt882 Modem	Version v100r002b020_arg-t

References (6)

http://www.exploit-db.com/exploits/10276

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/37194

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/54528

Source: cve@mitre.org

http://www.exploit-db.com/exploits/10276

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/37194

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/54528

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.