Information disclosure

2020-07-1723:15:00

PRIOn knowledge base

www.prio-n.com

3.7 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800

CPENameOperatorVersion
cloudengine_12800_firmwareeq200r2c50spc800-v
cloudengine_12800_firmwareeq200r3c0spc810-v
cloudengine_12800_firmwareeq200r5c0spc800-v
cloudengine_12800_firmwareeq200r5c10spc800-v
cloudengine_12800_firmwareeq200r19c0spc800-v
cloudengine_5800_firmwareeq200r2c50spc800-v
cloudengine_5800_firmwareeq200r3c0spc810-v
cloudengine_5800_firmwareeq200r5c0spc800-v
cloudengine_5800_firmwareeq200r5c10spc800-v
cloudengine_5800_firmwareeq200r19c0spc800-v

Name	Operator	Version
cloudengine_12800_firmware	eq	200r2c50spc800-v
cloudengine_12800_firmware	eq	200r3c0spc810-v
cloudengine_12800_firmware	eq	200r5c0spc800-v
cloudengine_12800_firmware	eq	200r5c10spc800-v
cloudengine_12800_firmware	eq	200r19c0spc800-v
cloudengine_5800_firmware	eq	200r2c50spc800-v
cloudengine_5800_firmware	eq	200r3c0spc810-v
cloudengine_5800_firmware	eq	200r5c0spc800-v
cloudengine_5800_firmware	eq	200r5c10spc800-v
cloudengine_5800_firmware	eq	200r19c0spc800-v