Lucene search
Huawei TechnologiesHUAWEI-SA-20200108-01-RSAHistoryJan 08, 2020 - 12:00 a.m.
Security Advisory - Weak Algorithm Vulnerability in Some Huawei Products
2020-01-0800:00:00
Huawei Technologies
www.huawei.com
61
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
36.0%
There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information. (Vulnerability ID: HWPSIRT-2019-04082)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-1810.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en
Affected configurations
Node
huaweiar120-sMatchV200R007C00SPCb00
ORhuaweiar120-sMatchV200R007C00SPCc00
ORhuaweiar120-sMatchV200R008C50SPC500
ORhuaweiar120-sMatchV200R009C00SPC500
ORhuaweiar120-sMatchV200R010C10SPC300
ORhuaweiar1200MatchV200R007C00SPCb00
ORhuaweiar1200MatchV200R007C00SPCb00PWE
ORhuaweiar1200MatchV200R007C00SPCc00
ORhuaweiar1200MatchV200R008C50SPC500
ORhuaweiar1200MatchV200R008C50SPC500PWE
ORhuaweiar1200MatchV200R009C00SPC500
ORhuaweiar1200MatchV200R009C00SPC500PWE
ORhuaweiar1200MatchV200R010C00SPC200
ORhuaweiar1200MatchV200R010C00SPC200PWE
ORhuaweiar1200MatchV200R010C00SPC500
ORhuaweiar1200MatchV200R010C00SPC500PWE
ORhuaweiar1200MatchV200R010C00SPC600
ORhuaweiar1200MatchV300R003C00SPC500
ORhuaweiar1200MatchV300R003C00SPC500PWE
ORhuaweiar1200MatchV300R003C00SPC600
ORhuaweiar1200-sMatchV200R007C00SPCb00
ORhuaweiar1200-sMatchV200R007C00SPCc00
ORhuaweiar1200-sMatchV200R008C50SPC500
ORhuaweiar1200-sMatchV200R008C50SPC500PWE
ORhuaweiar1200-sMatchV200R009C00SPC500
ORhuaweiar1200-sMatchV200R009C00SPC500PWE
ORhuaweiar1200-sMatchV200R010C00SPC200
ORhuaweiar1200-sMatchV200R010C00SPC600
ORhuaweiar150MatchV200R007C00SPCb00
ORhuaweiar150MatchV200R007C00SPCb00PWE
ORhuaweiar150MatchV200R007C00SPCc00
ORhuaweiar150MatchV200R008C50SPC500
ORhuaweiar150MatchV200R008C50SPC500PWE
ORhuaweiar150MatchV200R009C00SPC500
ORhuaweiar150MatchV200R010C00SPC200
ORhuaweiar150MatchV200R010C00SPC600
ORhuaweiar150-sMatchV200R007C00SPCb00
ORhuaweiar150-sMatchV200R007C00SPCc00
ORhuaweiar150-sMatchV200R008C50SPC500
ORhuaweiar150-sMatchV200R009C00SPC500
ORhuaweiar150-sMatchV200R010C10SPC300
ORhuaweiar160MatchV200R007C00SPCb00
ORhuaweiar160MatchV200R007C00SPCb00PWE
ORhuaweiar160MatchV200R007C00SPCc00
ORhuaweiar160MatchV200R008C50SPC500
ORhuaweiar160MatchV200R009C00SPC500
ORhuaweiar160MatchV200R009C00SPC500PWE
ORhuaweiar160MatchV200R010C00SPC200
ORhuaweiar160MatchV200R010C00SPC500
ORhuaweiar160MatchV200R010C00SPC600
ORhuaweiar160MatchV300R003C00SPC300
ORhuaweiar160MatchV300R003C00SPC300B808
ORhuaweiar160MatchV300R003C00SPC500
ORhuaweiar160MatchV300R003C00SPC500PWE
ORhuaweiar160MatchV300R003C00SPC600
ORhuaweiar200MatchV200R007C00SPCb00
ORhuaweiar200MatchV200R007C00SPCb00PWE
ORhuaweiar200MatchV200R007C00SPCc00
ORhuaweiar200MatchV200R008C50SPC500
ORhuaweiar200MatchV200R009C00SPC500
ORhuaweiar200MatchV200R009C00SPC500PWE
ORhuaweiar200MatchV200R010C00SPC200
ORhuaweiar200MatchV200R010C00SPC600
ORhuaweiar200-sMatchV200R007C00SPCb00
ORhuaweiar200-sMatchV200R007C00SPCc00
ORhuaweiar200-sMatchV200R008C50SPC500
ORhuaweiar200-sMatchV200R009C00SPC500
ORhuaweiar200-sMatchV200R010C10SPC300
ORhuaweiar2200MatchV200R007C00SPCb00
ORhuaweiar2200MatchV200R007C00SPCb00PWE
ORhuaweiar2200MatchV200R007C00SPCc00
ORhuaweiar2200MatchV200R008C50SPC500
ORhuaweiar2200MatchV200R009C00SPC500
ORhuaweiar2200MatchV200R009C00SPC500PWE
ORhuaweiar2200MatchV200R010C00SPC200
ORhuaweiar2200MatchV200R010C00SPC200PWE
ORhuaweiar2200MatchV200R010C00SPC500
ORhuaweiar2200MatchV200R010C00SPC500PWE
ORhuaweiar2200MatchV200R010C00SPC600
ORhuaweiar2200MatchV300R003C00SPC300
ORhuaweiar2200MatchV300R003C00SPC500
ORhuaweiar2200MatchV300R003C00SPC500PWE
ORhuaweiar2200MatchV300R003C00SPC600
ORhuaweiar2200-sMatchV200R007C00SPCb00
ORhuaweiar2200-sMatchV200R007C00SPCc00
ORhuaweiar2200-sMatchV200R008C50SPC500
ORhuaweiar2200-sMatchV200R009C00SPC500
ORhuaweiar2200-sMatchV200R009C00SPC500PWE
ORhuaweiar2200-sMatchV200R010C00SPC200
ORhuaweiar2200-sMatchV200R010C00SPC600
ORhuaweiar3200MatchV200R007C00SPCb00
ORhuaweiar3200MatchV200R007C00SPCb00PWE
ORhuaweiar3200MatchV200R007C00SPCc00
ORhuaweiar3200MatchV200R008C50SPC500
ORhuaweiar3200MatchV200R008C50SPC500PWE
ORhuaweiar3200MatchV200R009C00SPC302
ORhuaweiar3200MatchV200R009C00SPC500
ORhuaweiar3200MatchV200R009C00SPC500PWE
ORhuaweiar3200MatchV200R010C00SPC200
ORhuaweiar3200MatchV200R010C00SPC200PWE
ORhuaweiar3200MatchV200R010C00SPC500
ORhuaweiar3200MatchV200R010C00SPC500PWE
ORhuaweiar3200MatchV200R010C00SPC600
ORhuaweiar3200MatchV300R003C00SPC000
ORhuaweiar3200MatchV300R003C00SPC500
ORhuaweiar3200MatchV300R003C00SPC500PWE
ORhuaweiar3200MatchV300R003C00SPC600
ORhuaweiar3600MatchV200R007C00SPCb00
ORhuaweiar3600MatchV200R007C00SPCb00PWE
ORhuaweiar3600MatchV200R007C00SPCc00
ORhuaweiar3600MatchV200R008C50SPC500
ORhuaweiar3600MatchV200R008C50SPC500PWE
ORhuaweiar3600MatchV200R009C00SPC500
ORhuaweiar3600MatchV200R010C10SPC300
ORhuaweiar3600MatchV300R003C00SPC500
ORhuaweiar3600MatchV300R003C00SPC600
ORhuaweihuawei_firmwareMatchV500R005C00SPC100
ORhuaweicloudengine_12800MatchV100R003C00SPC600
ORhuaweicloudengine_12800MatchV100R003C10SPC100
ORhuaweicloudengine_12800MatchV100R005C00SPC200
ORhuaweicloudengine_12800MatchV100R005C00SPC300
ORhuaweicloudengine_12800MatchV100R005C10HP0001
ORhuaweicloudengine_12800MatchV100R005C10SPC100
ORhuaweicloudengine_12800MatchV100R005C10SPC200
ORhuaweicloudengine_12800MatchV100R006C00
ORhuaweicloudengine_12800MatchV200R001C00
ORhuaweicloudengine_12800MatchV200R002C01
ORhuaweicloudengine_12800MatchV200R002C10
ORhuaweicloudengine_12800MatchV200R002C20
ORhuaweicloudengine_12800MatchV200R005C10
ORhuaweinetengine16exMatchV200R007C00SPCb00
ORhuaweinetengine16exMatchV200R007C00SPCc00
ORhuaweinetengine16exMatchV200R008C50SPC500
ORhuaweinetengine16exMatchV200R009C00SPC500
ORhuaweis5700MatchV200R005C00SPC500
ORhuaweis5700MatchV200R005C03
ORhuaweis5700MatchV200R006C00SPC100
ORhuaweis5700MatchV200R006C00SPC300
ORhuaweis5700MatchV200R006C00SPC500
ORhuaweis5700MatchV200R007C00SPC100
ORhuaweis5700MatchV200R007C00SPC500
ORhuaweis6700MatchV200R005C00SPC500
ORhuaweis6700MatchV200R005C01
ORhuaweisrg1300MatchV200R007C00SPCb00
ORhuaweisrg1300MatchV200R007C00SPCc00
ORhuaweisrg1300MatchV200R008C50SPC500
ORhuaweisrg1300MatchV200R009C00SPC500
ORhuaweisrg1300MatchV200R010C00SPC200
ORhuaweisrg1300MatchV200R010C00SPC600
ORhuaweisrg1300MatchV300R003C00SPC500
ORhuaweisrg2300MatchV200R007C00SPCb00
ORhuaweisrg2300MatchV200R007C00SPCc00
ORhuaweisrg2300MatchV200R008C50SPC500
ORhuaweisrg2300MatchV200R009C00SPC500
ORhuaweisrg2300MatchV200R010C00SPC200
ORhuaweisrg2300MatchV200R010C00SPC600
ORhuaweisrg2300MatchV300R003C00SPC500
ORhuaweisrg3300MatchV200R007C00SPCb00
ORhuaweisrg3300MatchV200R007C00SPCc00
ORhuaweisrg3300MatchV200R008C50SPC500
ORhuaweisrg3300MatchV200R009C00SPC500
ORhuaweisrg3300MatchV200R010C00SPC200
ORhuaweisrg3300MatchV200R010C00SPC600
ORhuaweisrg3300MatchV300R003C00SPC500
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC200
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC300
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC500
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC600
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC100
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC101
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC200
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC300
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC500
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC600
ORhuaweisecospace_antiddos8000MatchV500R005C00SPC100
ORhuaweisecospace_antiddos8000MatchV500R005C00SPC200
ORhuaweisecospace_usg6600MatchV500R001C30SPC100
ORhuaweiusg6000vMatchV500R005C00SPC100
Related
prion
prion
Information disclosure
2020-01-09 18:15:00
cvelist
cvelist
CVE-2020-1810
2020-01-09 17:44:54
cve
cve
CVE-2020-1810
2020-01-09 18:15:10
openvas
openvas
nvd
nvd
CVE-2020-1810
2020-01-09 18:15:10
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
36.0%
Related for HUAWEI-SA-20200108-01-RSA