Lucene search

[email protected]CVE-2014-5394

HistoryJan 08, 2018 - 7:29 p.m.

CVE-2014-5394

2018-01-0819:29:00

CWE-200

[email protected]

web.nvd.nist.gov

huawei

campus switches

ssh

enumeration

cve-2014-5394

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

JSON

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

Affected configurations

NVD

Node

huaweis9300_firmwareMatchv200r001c00spc300

huaweis9300_firmwareMatchv200r002c00spc300

huaweis9300_firmwareMatchv200r003c00spc500

AND

huaweis9300Match-

Node

huaweis9300e_firmwareMatchv200r001c00spc300

huaweis9300e_firmwareMatchv200r002c00spc300

huaweis9300e_firmwareMatchv200r003c00spc500

AND

huaweis9300eMatch-

Node

huaweis7700_firmwareMatchv200r001c00spc300

huaweis7700_firmwareMatchv200r002c00spc300

huaweis7700_firmwareMatchv200r003c00spc500

AND

huaweis7700Match-

Node

huaweis9700_firmwareMatchv200r001c00spc300

huaweis9700_firmwareMatchv200r002c00spc300

huaweis9700_firmwareMatchv200r003c00spc500

AND

huaweis9700Match-

Node

huaweis5700_firmwareMatchv200r001c00spc300

huaweis5700_firmwareMatchv200r002c00spc300

huaweis5700_firmwareMatchv200r003c00spc300

AND

huaweis5700Match-

Node

huaweis6700_firmwareMatchv200r001c00spc300

huaweis6700_firmwareMatchv200r002c00spc300

huaweis6700_firmwareMatchv200r003c00spc300

AND

huaweis6700Match-

Node

huaweis5300_firmwareMatchv200r001c00spc300

huaweis5300_firmwareMatchv200r002c00spc300

huaweis5300_firmwareMatchv200r003c00spc300

AND

huaweis5300Match-

Node

huaweis6300_firmwareMatchv200r001c00spc300

huaweis6300_firmwareMatchv200r002c00spc300

huaweis6300_firmwareMatchv200r003c00spc300

AND

huaweis6300Match-

Node

huaweis2300_firmwareMatchv100r006c05

AND

huaweis2300Match-

Node

huaweis2700_firmwareMatchv100r006c05

AND

huaweis2700Match-

Node

huaweis3300_firmwareMatchv100r006c05

AND

huaweis3300Match-

Node

huaweis3700_firmwareMatchv100r006c05

AND

huaweis3700Match-

CPENameOperatorVersion
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r001c00spc300
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r002c00spc300
huawei:s9300_firmwarehuawei s9300 firmwareeqv200r003c00spc500

CPE	Name	Operator	Version
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r001c00spc300
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r002c00spc300
huawei:s9300_firmware	huawei s9300 firmware	eq	v200r003c00spc500

References

www.huawei.com/us/psirt/security-advisories/2014/hw-362701

www.securityfocus.com/bid/69302

exchange.xforce.ibmcloud.com/vulnerabilities/97763

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

JSON

Related for CVE-2014-5394

nessus1 prion1 cvelist1 huawei1 openvas1 nvd1