Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
华为D100路由器多个安全漏洞
Vulnerability Description
D100是世界上第一个通过WiFi链接将手机、游戏机、PC和手提电脑连接在一起的WiFi适配器。 D100固件及其默认配置中存在多个安全漏洞，可能允许LAN用户非授权访问设备。 #1 Web接口不支持HTTPS，攻击者可以嗅探到Web接口的通讯。 #2 管理员的登录用户名和口令以明文存储在了cookie中。
CVSS Information
N/A
Vulnerability Type
N/A