CVEvulnerability

CVE-2020-1810

5.3 MEDIUM Published 2020-01-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-327

Description

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Affected configurations

• huawei cloudengine 12800 firmware v100r003c00spc600 • huawei cloudengine 12800 firmware v100r003c10spc100 • huawei cloudengine 12800 firmware v100r005c00spc200 • huawei cloudengine 12800 firmware v100r005c00spc300 • huawei cloudengine 12800 firmware v100r005c10hp0001 • huawei cloudengine 12800 firmware v100r005c10spc100 • huawei cloudengine 12800 firmware v100r005c10spc200 • huawei cloudengine 12800 firmware v100r006c00 • huawei cloudengine 12800 firmware v200r001c00 • huawei cloudengine 12800 firmware v200r002c01 • huawei cloudengine 12800 firmware v200r002c10 • huawei cloudengine 12800 firmware v200r002c20 • huawei cloudengine 12800 firmware v200r005c10 • huawei s5700 firmware v200r005c00spc500 • huawei s5700 firmware v200r005c03 • huawei s5700 firmware v200r006c00spc100 • huawei s5700 firmware v200r006c00spc300 • huawei s5700 firmware v200r006c00spc500 • huawei s5700 firmware v200r007c00spc100 • huawei s5700 firmware v200r007c00spc500 • huawei s6700 firmware v200r005c00spc500 • huawei s6700 firmware v200r005c01

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References