VulnerabilityModified

CVE-2012-4960

MEDIUM 6.5EPSS 3.45%

Does this matter?

Lower severity and a low EPSS score (3.45%). Track it; it rarely justifies an emergency change on its own.

Description

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 3.45% probability · 88th percentile
CISA KEV: Not listed
Weakness: CWE-310
Affected: huawei/acu · huawei/ar 19\/29\/49 · huawei/ar g3 · huawei/atn · huawei/cx200 · huawei/cx300 · huawei/cx600 · huawei/e200 usg2200 · huawei/e200 usg5100 · huawei/e200e-b · huawei/e200e-c · huawei/e200e-usg2100 · huawei/e200e-x1 · huawei/e200e-x2 · huawei/e200x3 · huawei/e200x5 · huawei/e200x7 · huawei/eudemon 8080e · huawei/eudemon 8160e · huawei/eudemon usg5300 · +40 more
Source: cret@cert.org

References

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htmVendor Advisory
http://www.kb.cert.org/vuls/id/948096US Government Resource
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htmVendor Advisory
http://www.kb.cert.org/vuls/id/948096US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.