medium5.9
CVE-2014-5394
Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
Impact
Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | S9300 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc500 |
| Huawei | S9300e Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc500 |
| Huawei | S7700 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc500 |
| Huawei | S9700 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc500 |
| Huawei | S5700 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc300 |
| Huawei | S6700 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc300 |
| Huawei | S5300 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc300 |
| Huawei | S6300 Firmware | Versions v200r001c00spc300, v200r002c00spc300, v200r003c00spc300 |
| Huawei | S2300 Firmware | Version v100r006c05 |
| Huawei | S2700 Firmware | Version v100r006c05 |
| Huawei | S3300 Firmware | Version v100r006c05 |
| Huawei | S3700 Firmware | Version v100r006c05 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.huawei.com/us/psirt/security-advisories/2014/hw-362701
- http://www.securityfocus.com/bid/69302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97763
- http://www.huawei.com/us/psirt/security-advisories/2014/hw-362701
- http://www.securityfocus.com/bid/69302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97763