VULNERABILITY INTELLIGENCE

CVE-2009-4197

CVSS score4.7 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2009-12-04
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:N/A:N

Description

rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.

Primary references