Lucene search
Huawei TechnologiesHUAWEI-SA-20120827-01-CX600HistoryAug 27, 2012 - 12:00 a.m.
Security Advisory- Risk of Password Being Cracked Due to DES Encryption Algorithm
2012-08-2700:00:00
Huawei Technologies
www.huawei.com
19
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.006
Percentile
79.1%
In multiple Huawei products, DES encryption algorithm is used for password and the encryption is not strong enough so it may be cracked (HWNSIRT-2012-0820).
This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2012-4960.
Temporary fix for this vulnerability is available. Huawei has made the version plan to resolve this vulnerability.
Affected configurations
Node
huaweine5000e_firmwareMatchv300r007
ORhuaweine5000e_firmwareMatchv800r002
ORhuawei-ma5200gMatchv200r003
ORhuawei-ma5200gMatchv300r003
ORhuaweine40e_firmwareMatchv300r003
ORhuaweine40e\/80eMatchv300r003
ORhuaweine40e_firmwareMatchv600r001
ORhuaweine40e_firmwareMatchv600r002
ORhuaweine40e_firmwareMatchv600r003\(excluding
ORhuaweine40e_firmwareMatchv600r003c00spca00\)
ORhuaweine40e\/80eMatchv600r001
ORhuaweine40e\/80eMatchv600r002
ORhuaweine40e\/80eMatchv600r003\(excluding
ORhuaweine40e\/80eMatchv600r003c00spca00\)
ORhuaweiatnMatchv200r001c00\,
ORhuaweiatnMatchv200r001c01
ORhuaweine40Matchv300r005
ORhuaweine80Matchv300r005
ORhuaweine20e-x6Matchv600r003
ORhuaweine20Matchv200r005
ORhuaweime60Matchv100r005
ORhuaweime60Matchv100r006
ORhuaweime60Matchv600r002
ORhuaweime60Matchv600r003
ORhuaweime60Matchv600r005c00spc600
ORhuaweicx600_firmwareMatchv200r002
ORhuaweicx600_firmwareMatchv600r001
ORhuaweicx600_firmwareMatchv600r002
ORhuaweicx600_firmwareMatchv600r003
ORhuaweicx200Matchv100r005
ORhuaweicx300Matchv100r005
ORhuaweiacu_firmwareMatchv100r003c01spc100
ORhuaweiacu_firmwareMatchv200r001c00spc100
ORhuaweiacu_firmwareMatchv200r001c00
ORhuaweiwlan_ac_6605Matchv200r001c00
ORhuaweiwlan_ac_6605Matchv200r001c00spc100
ORhuaweis9300_firmwareMatchv100r001
ORhuaweis9300_firmwareMatchv100r002
ORhuaweis9300_firmwareMatchv100r003
ORhuaweis9300_firmwareMatchv100r006
ORhuaweis7700_firmwareMatchv100r003
ORhuaweis7700_firmwareMatchv100r006
ORhuaweis2300_firmwareMatchv100r002
ORhuaweis2300_firmwareMatchv100r003
ORhuaweis3300_firmwareMatchv100r002
ORhuaweis3300_firmwareMatchv100r003
ORhuaweis5300_firmwareMatchv100r002
ORhuaweis5300_firmwareMatchv100r003
ORhuaweis2300_firmwareMatchv100r005
ORhuaweis3300_firmwareMatchv100r005
ORhuaweis5300_firmwareMatchv100r005
ORhuaweis2700_firmwareMatchv100r005
ORhuaweis3_700_firmwareMatchv100r005
ORhuaweis5700_firmwareMatchv100r005
ORhuaweis2300_firmwareMatchv100r006c00
ORhuaweis2300_firmwareMatchv100r006c01
ORhuaweis3300_firmwareMatchv100r006c00
ORhuaweis3300_firmwareMatchv100r006c01
ORhuaweis5300_firmwareMatchv100r006c00
ORhuaweis5300_firmwareMatchv100r006c01
ORhuaweis3300hi_firmwareMatchv100r006c00
ORhuaweis3300hi_firmwareMatchv100r006c01
ORhuaweis5300hi_firmwareMatchv100r006c00
ORhuaweis5300hi_firmwareMatchv100r006c01
ORhuaweis5306Matchv100r006c00
ORhuaweis5306Matchv100r006c01
ORhuaweis6300_firmwareMatchv100r006c00
ORhuaweis6300_firmwareMatchv100r006c01
ORhuaweis2700_firmwareMatchv100r006c00
ORhuaweis2700_firmwareMatchv100r006c01
ORhuaweis3700_firmwareMatchv100r006c00
ORhuaweis3700_firmwareMatchv100r006c01
ORhuaweis5700_firmwareMatchv100r006c00
ORhuaweis5700_firmwareMatchv100r006c01
ORhuaweis6700_firmwareMatchv100r006c00
ORhuaweis6700_firmwareMatchv100r006c01
ORhuaweiar_g3Matchv200r001c00
ORhuaweiar_g3Matchv200r001c01
ORhuaweiar_g3Matchv200r002c00spc200
ORhuaweih3c_ar\(oem_in\)Range<x9
ORhuaweih3c_ar\(oem_in\)Range<R2209
ORhuaweiar_19\/29\/49Range<R2207
ORhuaweiar_19\/29\/49Range<R2207
ORhuawei49_firmwareRange<R2207
ORhuaweieudemon100eMatchv200r007
ORhuaweieudemon200Matchv200r001
ORhuaweieudemon300Range<V200R006C02
ORhuaweieudemon1000e-uRange<V200R001
ORhuaweieudemon_usg5300Range<V200R001
ORhuaweieudemon1000e-xRange<V200R002
ORhuaweiusg5500_firmwareRange<V200R002
ORhuaweieudemon_8160eRange<V100R003C00
ORhuaweieudemon_usg9300Range<V100R003C00
ORhuaweieudemon8000e-xRange<V200R001C00SPC600
ORhuaweiusg9500_firmwareRange<V200R001C00SPC600
ORhuaweie200e-cRange<V200R003C00
ORhuaweiusg2200Range<V200R003C00
ORhuaweie200e-x2Range<V100R005C01
ORhuaweiusg2100_firmwareRange<V100R005C01
ORhuaweisvn5300Matchv100r001c01b019
ORhuaweisvn2000Matchv200r001c00
ORhuaweisvn3000Matchv100r002c02spc802b041
ORhuaweinip100Matchv100r001
ORhuaweiar_200Matchv100r001
ORhuawei1000_firmwareMatchv100r001
ORhuaweinip2100Matchv100r001c00
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | ne5000e_firmware | v300r007 | cpe:2.3:o:huawei:ne5000e_firmware:v300r007:*:*:*:*:*:*:* |
| huawei | ne5000e_firmware | v800r002 | cpe:2.3:o:huawei:ne5000e_firmware:v800r002:*:*:*:*:*:*:* |
| huawei | -ma5200g | v200r003 | cpe:2.3:h:huawei:-ma5200g:v200r003:*:*:*:*:*:*:* |
| huawei | -ma5200g | v300r003 | cpe:2.3:h:huawei:-ma5200g:v300r003:*:*:*:*:*:*:* |
| huawei | ne40e_firmware | v300r003 | cpe:2.3:o:huawei:ne40e_firmware:v300r003:*:*:*:*:*:*:* |
| huawei | ne40e\/80e | v300r003 | cpe:2.3:h:huawei:ne40e\/80e:v300r003:*:*:*:*:*:*:* |
| huawei | ne40e_firmware | v600r001 | cpe:2.3:o:huawei:ne40e_firmware:v600r001:*:*:*:*:*:*:* |
| huawei | ne40e_firmware | v600r002 | cpe:2.3:o:huawei:ne40e_firmware:v600r002:*:*:*:*:*:*:* |
| huawei | ne40e_firmware | v600r003(excluding | cpe:2.3:o:huawei:ne40e_firmware:v600r003\(excluding:*:*:*:*:*:*:* |
| huawei | ne40e_firmware | v600r003c00spca00) | cpe:2.3:o:huawei:ne40e_firmware:v600r003c00spca00\):*:*:*:*:*:*:* |
Related
cve
cve
CVE-2012-4960
2013-06-20 15:55:00
prion
prion
Design/Logic Flaw
2013-06-20 15:55:00
cert
cert
Huawei networking equipment weak password cipher
2013-08-05 00:00:00
nvd
nvd
CVE-2012-4960
2013-06-20 15:55:00
cvelist
cvelist
CVE-2012-4960
2013-06-20 15:00:00
exploitdb
exploitdb
Huawei (Multiple Products) - Password Encryption
2012-11-13 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.006
Percentile
79.1%
Related for HUAWEI-SA-20120827-01-CX600