Huawei Technologies Information for VU#350135

Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin

Status

Affected

Vendor Statement

Based on the investigation, we confirmed that the products mentioned(Huawei
BM2022,Huawei HES-309M ,Huawei HES-319M ,Huawei HES-319M2W ,Huawei HES-339M)
in the report have reached End of Service (EOS) on June 30, 2015,.Huawei has
established a lifecycle management system and clarifies the product
lifecycle strategy and product termination strategy, implementing lifecycle
management in accordance with industry practices.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20170608-01-wimax-en

Addendum

There are no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.