CVEvulnerability
CVE-2012-4960
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-06-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-310
Description
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Affected configurations
• huawei acu v100r003c01spc100
• huawei acu v200r001c00
• huawei acu v200r001c00spc100
• huawei ar 19\/29\/49 (<= r2207)
• huawei ar g3 v200r001c00
• huawei ar g3 v200r001c01
• huawei ar g3 v200r002c00spc200
• huawei atn v200r001c00
• huawei atn v200r001c01
• huawei cx200 v100r005
• huawei cx300 v100r005
• huawei cx600 v200r002
• huawei cx600 v600r001
• huawei cx600 v600r002
• huawei cx600 v600r003
• huawei e200 usg2200 (<= v200r003c00)
• huawei e200 usg5100 (<= v200r003c00)
• huawei e200e-b (<= v100r005c01)
• huawei e200e-c (<= v200r003c00)
• huawei e200e-usg2100 (<= v100r005c01)
• huawei e200e-x1 (<= v100r005c01)
• huawei e200e-x2 (<= v100r005c01)
• huawei e200x3 (<= v200r003c00)
• huawei e200x5 (<= v200r003c00)
• huawei e200x7 (<= v200r003c00)
• huawei eudemon 8080e (<= v100r003c00)
• huawei eudemon 8160e (<= v100r003c00)
• huawei eudemon usg5300 (<= v200r001)
• huawei eudemon usg5500 (<= v200r002)
• huawei eudemon usg9300 (<= v100r003c00)
• huawei eudemon usg9500 (<= v200r001c00spc600)
• huawei eudemon1000 (<= v200r006c02)
• huawei eudemon1000e-u (<= v200r001)
• huawei eudemon1000e-x (<= v200r002)
• huawei eudemon100e v200r007
• huawei eudemon200 v200r001
• huawei eudemon300 (<= v200r006c02)
• huawei eudemon500 (<= v200r006c02)
• huawei eudemon8000e-x (<= v200r001c00spc600)
• huawei h3c ar\(oem in\) (<= r2209)
• huawei ma5200g v200r003
• huawei ma5200g v300r003
• huawei me60 v100r005
• huawei me60 v100r006
• huawei me60 v600r002
• huawei me60 v600r003
• huawei me60 v600r005c00spc600
• huawei ne20 v200r005
• huawei ne20e-x6 v300r005
• huawei ne40 v300r005
• huawei ne40e v300r005
• huawei ne40e v600r001
• huawei ne40e\/80e v600r002
• huawei ne40e\/80e v600r003
• huawei ne5000e v300r007
• huawei ne5000e v800r002
• huawei ne80 v300r005
• huawei ne80e v600r001
• huawei ne80e v600r002
• huawei ne80e v600r003
… and 47 more
Related
Weakness · not in database (1)
References
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htm Vendor Advisory
- http://www.kb.cert.org/vuls/id/948096 US Government Resource
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htm Vendor Advisory
- http://www.kb.cert.org/vuls/id/948096 US Government Resource