Security Notice-Statement about the General Database Account Security Issue Reported by Wooyun.org
- Initial Release Date: May 27, 2014
- Last Release Date: May 27, 2014
Huawei has noticed the report about a general database account security issue in a Huawei wireless product on wooyun.org in May 2014. Huawei immediately launched a thorough investigation and communicated with the white hat.
After investigation, we find out that the affected product is the enterprise mobile information engine (EIE). The account in the report is default account. However, users can change the account through configuration.
This statement is to remind our clients who have bought or are using EIE product that some default account passwords have been published on the Internet and users must change their account passwords from the default according to the installation guide to prevent intrusions.
2014-05-27 V1.0 INITIAL
Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism. Please report to Huawei PSIRT at psirt@huawei.com if you find any security vulnerability of Huawei products.
