CVE-2015-8673

Description

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation.

Risk Information

Base Score

6.8

MODERATE

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.027

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b022	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b019	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b018	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b017	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b016	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b014	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b013	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b012	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b011	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b010	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b002	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10b001	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c10	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c02	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c01spc107tb010	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c01spc100	NCM
Vulnerabilities CVE-2015-8672 ,CVE-2015-8673 are affected in te60_firmware v100r001c01	NCM
CVE-2015-8673	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234