PT-2017-6389
CVE-2014-9696
·
Published
2017-04-02
·
Updated
2017-04-05
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Huawei Tecal E9000 Chassis versions V100R001C00SPC160 and earlier
Description
The issue allows an operator to modify the user configuration of iMana through privilege escalation in the Hyper Module Management (HMM) software.
Recommendations
For versions V100R001C00SPC160 and earlier, consider restricting access to the HMM software to prevent unauthorized modifications to the iMana user configuration until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾