What’s Vulnerable › Vulnerabilities

CVE-2009-4197

• Severity: medium (CVSS 4.7 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-12-04 · updated 2026-06-16

Description

rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.

Affected products

• Huawei Mt882 Modem: v100r002b020_arg-t
• Huawei Mt882 Modem Firmware: 3.7.9.98

References

• http://www.exploit-db.com/exploits/10276
• http://www.securityfocus.com/bid/37194
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54528
• http://www.exploit-db.com/exploits/10276
• http://www.securityfocus.com/bid/37194
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54528

Get alerted when CVE-2009-4197 or the next vulnerability affects your stack