Reversible Encryption Flaw in Huawei AR Routers

CVE-2015-8085

Summary

The vulnerability identified in Huawei AR Routers allows remote authenticated administrators to exploit a weakness in the password encryption mechanism. This issue arises due to the selection of a reversible encryption algorithm, enabling unauthorized access to sensitive plaintext passwords. Affected models include several series of Huawei routers, which could put network security at risk if not addressed. It is crucial for users of these products to ensure they are running updated software versions to mitigate associated threats.

References