Vulnerability in Huawei Cloudengine 12800

CVE-2020-1810

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Vulnerability class: POODLE (CVE-2014-3566)

Published · last modified .

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

EPSS exploit prediction

EPSS: 0.005 (36.8th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 37th percentile — 36.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2020-1810: held from 0.005 to 0.005.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

  • Huawei Cloudengine 12800
  • Huawei Cloudengine 12800 Firmware — versions v100r003c00spc600, v100r003c10spc100, v100r005c00spc200
  • Huawei S5700
  • Huawei S5700 Firmware — versions v200r005c00spc500, v200r005c03, v200r006c00spc100
  • Huawei S6700
  • Huawei S6700 Firmware — versions v200r005c00spc500, v200r005c01
  • Cloudengine 12800;s5700;s6700 — versions V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10, V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500, V200R005C00SPC500,V200R005C01

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-1810?
CVE-2020-1810 is a medium-severity vulnerability in Huawei Cloudengine 12800, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.3/10. Published 2020-01-09.
How severe is CVE-2020-1810?
Medium severity. CVSS v3 base score is 5.3 out of 10.