Lucene search

Huawei TechnologiesHUAWEI-SA-20120827-01-CX600

HistoryAug 27, 2012 - 12:00 a.m.

Security Advisory- Risk of Password Being Cracked Due to DES Encryption Algorithm

2012-08-2700:00:00

Huawei Technologies

www.huawei.com

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

83.2%

JSON

In multiple Huawei products, DES encryption algorithm is used for password and the encryption is not strong enough so it may be cracked (HWNSIRT-2012-0820).

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2012-4960.

Temporary fix for this vulnerability is available. Huawei has made the version plan to resolve this vulnerability.

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

83.2%

JSON

Related for HUAWEI-SA-20120827-01-CX600