CoreCVE
Back

MEDIUM

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation

Published Jan 12, 2016

Description

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-255

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 12, 2016
Updated Aug 6, 2024
Reserved Dec 25, 2015
Link CVE-2015-8673
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2015-8673
Red Hat
Severity n/a
Public date n/a
Links CVE-2015-8673