Information disclosure

2019-12-1622:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition.

CPENameOperatorVersion
ar120-s_firmwareeq200r5c32-v
ar120-s_firmwareeq200r6c10-v
ar120-s_firmwareeq200r7c0-v
ar120-s_firmwareeq200r8c50-v
ar120-s_firmwareeq200r9c0-v
ar120-s_firmwareeq200r10c0-v
ar1200-s_firmwareeq200r5c20-v
ar1200-s_firmwareeq200r5c32-v
ar1200-s_firmwareeq200r6c10-v
ar1200-s_firmwareeq200r7c0-v

Name	Operator	Version
ar120-s_firmware	eq	200r5c32-v
ar120-s_firmware	eq	200r6c10-v
ar120-s_firmware	eq	200r7c0-v
ar120-s_firmware	eq	200r8c50-v
ar120-s_firmware	eq	200r9c0-v
ar120-s_firmware	eq	200r10c0-v
ar1200-s_firmware	eq	200r5c20-v
ar1200-s_firmware	eq	200r5c32-v
ar1200-s_firmware	eq	200r6c10-v
ar1200-s_firmware	eq	200r7c0-v