Lucene search

Huawei TechnologiesHUAWEI-SA-20140820-01-CAMPUS-SWITCH

HistoryAug 20, 2014 - 12:00 a.m.

Security Advisory- SSH Username Information Disclosure Vulnerability in Huawei Campus Switch

2014-08-2000:00:00

Huawei Technologies

www.huawei.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

58.4%

JSON

Some versions of Huawei Campus switch series products S9300/S9300E/S7700/S9700

/S5700/S6700/S5300/S6300/S2300/S2700/S3300/S3700 are affected by username information disclosure vulnerability.

When the maintenance terminal of a Huawei Campus switch uses SSH to log in to a server, attackers can guess whether a username exists on the switch based on the messages returned by the server. (Vulnerability ID: HWPSIRT-2014-0312)

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-5394.

Affected configurations

Vulners

Node

huaweicampus_s9300MatchV200R001C00SPC300

huaweis9300eMatchV200R001C00SPC300

huaweis7700MatchV200R001C00SPC300

huaweis9700MatchV200R001C00SPC300

huaweicampus_s9300MatchV200R002C00SPC300

huaweis9300eMatchV200R002C00SPC300

huaweis7700MatchV200R002C00SPC300

huaweis9700MatchV200R002C00SPC300

huaweicampus_s9300MatchV200R003C00SPC500

huaweis9300eMatchV200R003C00SPC500

huaweis7700MatchV200R003C00SPC500

huaweis9700MatchV200R003C00SPC500

huaweicampus_s5700MatchV200R001C00SPC300

huaweis6700MatchV200R001C00SPC300

huaweis5300MatchV200R001C00SPC300

huaweis6300MatchV200R001C00SPC300

huaweicampus_s5700MatchV200R002C00SPC300

huaweis6700MatchV200R002C00SPC300

huaweis5300MatchV200R002C00SPC300

huaweis6300MatchV200R002C00SPC300

huaweicampus_s5700MatchV200R003C00SPC300

huaweis6700MatchV200R003C00SPC300

huaweis5300MatchV200R003C00SPC300

huaweis6300MatchV200R003C00SPC300

huaweis2300MatchV100R006C05

huaweis2700MatchV100R006C05

huaweis3300MatchV100R006C05

huaweis3700MatchV100R006C05

CPENameOperatorVersion
campus switch s9300eqV200R001C00SPC300
s9300eeqV200R001C00SPC300
s7700eqV200R001C00SPC300
s9700eqV200R001C00SPC300
campus switch s9300eqV200R002C00SPC300
s9300eeqV200R002C00SPC300
s7700eqV200R002C00SPC300
s9700eqV200R002C00SPC300
campus switch s9300eqV200R003C00SPC500
s9300eeqV200R003C00SPC500

Name	Operator	Version
campus switch s9300	eq	V200R001C00SPC300
s9300e	eq	V200R001C00SPC300
s7700	eq	V200R001C00SPC300
s9700	eq	V200R001C00SPC300
campus switch s9300	eq	V200R002C00SPC300
s9300e	eq	V200R002C00SPC300
s7700	eq	V200R002C00SPC300
s9700	eq	V200R002C00SPC300
campus switch s9300	eq	V200R003C00SPC500
s9300e	eq	V200R003C00SPC500

Rows per page:

1-10 of 281

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

58.4%

JSON

Related for HUAWEI-SA-20140820-01-CAMPUS-SWITCH