CVE-2009-2271: The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force...

Security readout for executives and security teams

Huawei D100 devices were reported with default administrator credentials that are not forced to change. If an admin interface is reachable and defaults remain, an attacker may gain device access without exploiting a software flaw. Exposure is most likely on Huawei D100 devices with web or telnet administration reachable from the internet, partner networks, or untrusted internal segments, especially where initial credentials were never changed. Prioritize quickly if Huawei D100 devices are still deployed. This is old technology, but default credentials on network equipment can create direct control risk with low attacker effort. Mitigation focus: Inventory networks for Huawei D100 devices and confirm whether web or telnet administration is enabled.; Change all default administrator passwords on any identified device.; Disable telnet administration where possible, or restrict it to a trusted management network..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.