CVE-2009-2272

CVE-2009-2272 describes a critical information disclosure vulnerability in the Huawei D100 and its firmware, where the administrator's account name and password are stored in cleartext within a cookie. This allows attackers to easily obtain sensitive credentials by reading cookie files or sniffing network traffic. Rated with a CVSS score of 7.5 (HIGH), the vulnerability has a low attack complexity and high confidentiality impact, as it can be exploited remotely without authentication. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.