CVE-2012-4960
Description
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei cx200 | v100r005 | — |
| huawei acu | v100r003c01spc100, v200r001c00, v200r001c00spc100 | — |
| huawei ar_19\/29\/49 | v ≤ r2207 | — |
| huawei ar_g3 | v200r001c00, v200r001c01, v200r002c00spc200 | — |
| huawei atn | v200r001c00, v200r001c01 | — |
| huawei cx300 | v100r005 | — |
| huawei cx600 | v200r002, v600r001, v600r002, v600r003 | — |
| huawei e200_usg2200 | v ≤ v200r003c00 | — |
| huawei e200_usg5100 | v ≤ v200r003c00 | — |
| huawei e200e-b | v ≤ v100r005c01 | — |
| huawei e200e-c | v ≤ v200r003c00 | — |
| huawei e200e-usg2100 | v ≤ v100r005c01 | — |
| huawei e200e-x1 | v ≤ v100r005c01 | — |
| huawei e200e-x2 | v ≤ v100r005c01 | — |
| huawei e200x3 | v ≤ v200r003c00 | — |
| huawei e200x5 | v ≤ v200r003c00 | — |
| huawei e200x7 | v ≤ v200r003c00 | — |
| huawei eudemon_8080e | v ≤ v100r003c00 | — |
| huawei eudemon_8160e | v ≤ v100r003c00 | — |
| huawei eudemon_usg5300 | v ≤ v200r001 | — |
| huawei eudemon_usg5500 | v ≤ v200r002 | — |
| huawei eudemon_usg9300 | v ≤ v100r003c00 | — |
| huawei eudemon_usg9500 | v ≤ v200r001c00spc600 | — |
| huawei eudemon1000 | v ≤ v200r006c02 | — |
| huawei eudemon1000e-u | v ≤ v200r001 | — |
| huawei eudemon1000e-x | v ≤ v200r002 | — |
| huawei eudemon100e | v200r007 | — |
| huawei eudemon200 | v200r001 | — |
| huawei eudemon300 | v ≤ v200r006c02 | — |
| huawei eudemon500 | v ≤ v200r006c02 | — |
| huawei eudemon8000e-x | v ≤ v200r001c00spc600 | — |
| huawei h3c_ar\(oem_in\) | v ≤ r2209 | — |
| huawei ma5200g | v200r003, v300r003 | — |
| huawei me60 | v100r005, v100r006, v600r002, v600r003, v600r005c00spc600 | — |
| huawei ne20 | v200r005 | — |
| huawei ne20e-x6 | v300r005 | — |
| huawei ne40 | v300r005 | — |
| huawei ne40e | v300r005, v600r001 | — |
| huawei ne40e\/80e | v600r002, v600r003 | — |
| huawei ne5000e | v300r007, v800r002 | — |
| huawei ne80 | v300r005 | — |
| huawei ne80e | v600r001, v600r002, v600r003 | — |
| huawei nip100 | v100r001 | — |
| huawei nip1000 | v100r001 | — |
| huawei nip200 | v100r001 | — |
| huawei nip2100 | v100r001c00 | — |
| huawei nip2200 | v100r001c00 | — |
| huawei nip5100 | v100r001c00 | — |
| huawei s2300 | v100r002, v100r003, v100r005, v100r006 | — |
| huawei s2700 | v100r006 | — |
| huawei s3300 | v100r002, v100r003, v100r005, v100r006 | — |
| huawei s3300hi | v100r006, v200r001 | — |
| huawei s3700 | v100r005, v100r006, v200r001 | — |
| huawei s5300 | v100r002, v100r003, v100r005, v100r006 | — |
| huawei s5300hi | v100r006, v200r001 | — |
| huawei s5306 | v100r006, v200r001 | — |
| huawei s5700 | v100r005, v100r006, v200r001 | — |
| huawei s6300 | v100r006, v200r001 | — |
| huawei s6700 | v100r006, v200r001 | — |
| huawei s7700 | v100r003, v100r006 | — |
| huawei s9300 | v100r001, v100r002, v100r003, v100r006 | — |
| huawei svn2000 | v200r001c00 | — |
| huawei svn3000 | v100r002c02spc802b041 | — |
| huawei svn5000 | v200r001c00 | — |
| huawei svn5300 | v100r001c01b019 | — |
| huawei wlan_ac_6605 | v200r001c00, v200r001c00spc100 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.