Lucene search

Huawei TechnologiesHUAWEI-SA-20140820-01-CAMPUS-SWITCH

HistoryAug 20, 2014 - 12:00 a.m.

Security Advisory- SSH Username Information Disclosure Vulnerability in Huawei Campus Switch

2014-08-2000:00:00

Huawei Technologies

www.huawei.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

58.4%

JSON

Some versions of Huawei Campus switch series products S9300/S9300E/S7700/S9700

/S5700/S6700/S5300/S6300/S2300/S2700/S3300/S3700 are affected by username information disclosure vulnerability.

When the maintenance terminal of a Huawei Campus switch uses SSH to log in to a server, attackers can guess whether a username exists on the switch based on the messages returned by the server. (Vulnerability ID: HWPSIRT-2014-0312)

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-5394.

Affected configurations

Vulners

Node

huaweicampus_s9300Matchv200r001c00spc300

huaweis9300e_firmwareMatchv200r001c00spc300

huaweis7700_firmwareMatchv200r001c00spc300

huaweis9700_firmwareMatchv200r001c00spc300

huaweicampus_s9300Matchv200r002c00spc300

huaweis9300e_firmwareMatchv200r002c00spc300

huaweis7700_firmwareMatchv200r002c00spc300

huaweis9700_firmwareMatchv200r002c00spc300

huaweicampus_s9300Matchv200r003c00spc500

huaweis9300e_firmwareMatchv200r003c00spc500

huaweis7700_firmwareMatchv200r003c00spc500

huaweis9700_firmwareMatchv200r003c00spc500

huaweicampus_s5700Matchv200r001c00spc300

huaweis6700_firmwareMatchv200r001c00spc300

huaweis5300_firmwareMatchv200r001c00spc300

huaweis6300_firmwareMatchv200r001c00spc300

huaweicampus_s5700Matchv200r002c00spc300

huaweis6700_firmwareMatchv200r002c00spc300

huaweis5300_firmwareMatchv200r002c00spc300

huaweis6300_firmwareMatchv200r002c00spc300

huaweicampus_s5700Matchv200r003c00spc300

huaweis6700_firmwareMatchv200r003c00spc300

huaweis5300_firmwareMatchv200r003c00spc300

huaweis6300_firmwareMatchv200r003c00spc300

huaweis2300Matchv100r006c05

huaweis2700_firmwareMatchv100r006c05

huaweis3300_firmwareMatchv100r006c05

huaweis3700_firmwareMatchv100r006c05

VendorProductVersionCPE
huaweicampus_s9300v200r001c00spc300cpe:2.3:h:huawei:campus_s9300:v200r001c00spc300:*:*:*:*:*:*:*
huaweis9300e_firmwarev200r001c00spc300cpe:2.3:o:huawei:s9300e_firmware:v200r001c00spc300:*:*:*:*:*:*:*
huaweis7700_firmwarev200r001c00spc300cpe:2.3:o:huawei:s7700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
huaweis9700_firmwarev200r001c00spc300cpe:2.3:a:huawei:s9700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
huaweicampus_s9300v200r002c00spc300cpe:2.3:h:huawei:campus_s9300:v200r002c00spc300:*:*:*:*:*:*:*
huaweis9300e_firmwarev200r002c00spc300cpe:2.3:o:huawei:s9300e_firmware:v200r002c00spc300:*:*:*:*:*:*:*
huaweis7700_firmwarev200r002c00spc300cpe:2.3:o:huawei:s7700_firmware:v200r002c00spc300:*:*:*:*:*:*:*
huaweis9700_firmwarev200r002c00spc300cpe:2.3:a:huawei:s9700_firmware:v200r002c00spc300:*:*:*:*:*:*:*
huaweicampus_s9300v200r003c00spc500cpe:2.3:h:huawei:campus_s9300:v200r003c00spc500:*:*:*:*:*:*:*
huaweis9300e_firmwarev200r003c00spc500cpe:2.3:o:huawei:s9300e_firmware:v200r003c00spc500:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	campus_s9300	v200r001c00spc300	cpe:2.3:h:huawei:campus_s9300:v200r001c00spc300:::::::*
huawei	s9300e_firmware	v200r001c00spc300	cpe:2.3:o:huawei:s9300e_firmware:v200r001c00spc300:::::::*
huawei	s7700_firmware	v200r001c00spc300	cpe:2.3:o:huawei:s7700_firmware:v200r001c00spc300:::::::*
huawei	s9700_firmware	v200r001c00spc300	cpe:2.3:a:huawei:s9700_firmware:v200r001c00spc300:::::::*
huawei	campus_s9300	v200r002c00spc300	cpe:2.3:h:huawei:campus_s9300:v200r002c00spc300:::::::*
huawei	s9300e_firmware	v200r002c00spc300	cpe:2.3:o:huawei:s9300e_firmware:v200r002c00spc300:::::::*
huawei	s7700_firmware	v200r002c00spc300	cpe:2.3:o:huawei:s7700_firmware:v200r002c00spc300:::::::*
huawei	s9700_firmware	v200r002c00spc300	cpe:2.3:a:huawei:s9700_firmware:v200r002c00spc300:::::::*
huawei	campus_s9300	v200r003c00spc500	cpe:2.3:h:huawei:campus_s9300:v200r003c00spc500:::::::*
huawei	s9300e_firmware	v200r003c00spc500	cpe:2.3:o:huawei:s9300e_firmware:v200r003c00spc500:::::::*

Rows per page:

1-10 of 281

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

58.4%

JSON

Related for HUAWEI-SA-20140820-01-CAMPUS-SWITCH