CVE-2009-4197

MEDIUM 4.7CVE-2009-4197 · Published 04/12/2009 · updated 16/06/2026

In short

CVE-2009-4197 is a MEDIUM (CVSS 4.7) vulnerability affecting mt882 modem firmware (huawei).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mt882 modem firmware huawei	`= 3.7.9.98`	No fix yet

Description

rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.

References

exploit-db.com/exploits/10276 · Exploit
securityfocus.com/bid/37194
exchange.xforce.ibmcloud.com/vulnerabilities/54528

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free