Information disclosure

2020-02-2819:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300 have an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage.

CPENameOperatorVersion
cloudengine_12800_firmwareeq200r1c0spc600-v
cloudengine_12800_firmwareeq200r1c0spc700-v
cloudengine_12800_firmwareeq200r2c1-v
cloudengine_12800_firmwareeq200r2c50spc800-v
cloudengine_12800_firmwareeq200r2c50spc800pwe-v
cloudengine_12800_firmwareeq200r3c0spc810-v
cloudengine_12800_firmwareeq200r3c0spc810pwe-v
cloudengine_12800_firmwareeq200r5c0spc600-v
cloudengine_12800_firmwareeq200r5c0spc800-v
cloudengine_12800_firmwareeq200r5c0spc800pwe-v

Name	Operator	Version
cloudengine_12800_firmware	eq	200r1c0spc600-v
cloudengine_12800_firmware	eq	200r1c0spc700-v
cloudengine_12800_firmware	eq	200r2c1-v
cloudengine_12800_firmware	eq	200r2c50spc800-v
cloudengine_12800_firmware	eq	200r2c50spc800pwe-v
cloudengine_12800_firmware	eq	200r3c0spc810-v
cloudengine_12800_firmware	eq	200r3c0spc810pwe-v
cloudengine_12800_firmware	eq	200r5c0spc600-v
cloudengine_12800_firmware	eq	200r5c0spc800-v
cloudengine_12800_firmware	eq	200r5c0spc800pwe-v