Vulnerability in Huawei Acu
CVE-2012-4960
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.5 (Medium). Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.035 (89.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 89.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.035 · newest: 0.035 · change: 0.000
Affected products
- Huawei Acu — versions v100r003c01spc100, v200r001c00, v200r001c00spc100
- Huawei Ar 19\/29\/49
- Huawei Ar G3 — versions v200r001c00, v200r001c01, v200r002c00spc200
- Huawei Atn — versions v200r001c00, v200r001c01
- Huawei Cx200 — versions v100r005
- Huawei Cx300 — versions v100r005
- Huawei Cx600 — versions v200r002, v600r001, v600r002
- Huawei E200e-B
- Huawei E200e-C
- Huawei E200e-Usg2100
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.kb.cert.org/vuls/id/948096 (US Government Resource, third-party-advisory)
- www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_19… (Vendor Advisory)
Frequently asked questions
- What is CVE-2012-4960?
- CVE-2012-4960 is a vulnerability in Huawei Acu, classified under Cryptographic Issues. Published 2013-06-20.
- Is CVE-2012-4960 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.