Vulnerability in Huawei Cloudengine 12800

CVE-2020-1810

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

  • Huawei Cloudengine_12800
  • Huawei Cloudengine_12800_firmware — versions v100r003c00spc600, v100r003c10spc100, v100r005c00spc200
  • Huawei S5700
  • Huawei S5700_firmware — versions v200r005c00spc500, v200r005c03, v200r006c00spc100
  • Huawei S6700
  • Huawei S6700_firmware — versions v200r005c00spc500, v200r005c01
  • N/a Cloudengine 12800;s5700;s6700 — versions V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10, V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500, V200R005C00SPC500,V200R005C01

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-1810?
CVE-2020-1810 is a medium-severity vulnerability in Huawei Cloudengine 12800, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.3/10. Published 2020-01-09.
How severe is CVE-2020-1810?
Medium severity. CVSS v3 base score is 5.3 out of 10.