CVE-2025-49599 MEDIUM

CVE-2025-49599

Vendor Huawei
Product EG8141A5
Weakness CWE-863 · Incorrect authorization
Published June 6, 2025
Last update June 9, 2025
View on NVD All CVEs

CVSS base score

4.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3.

Key dates

02Disclosure timeline

June 6, 2025 CVE published
June 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-6018 Pam-config: lpe from unprivileged to allow_active in pam CVE-2025-24434 Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-33884 Statamic's live preview token bypasses content protection for unrelated entries CVE-2025-6981 Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only access CVE-2025-9376 Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass