CVE-2012-4960 - CVE House
Back to Database
Status published Medium CVE-2012-4960

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6,...

Vulnerability Description

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-4960

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation...
Medium 6.2
CVE-2021-40042
There is a release of invalid pointer vulnerability in some...
Medium 6.5
CVE-2021-40033
There is an information exposure vulnerability on several Huawei Products....
Medium 5.5
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...
High 8.8
CVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...
High 7.8

Affected Vendor

Affected Software

acu, ar 19\/29\/49, ar g3, atn, cx200, cx300, cx600, e200 usg2200, e200 usg5100, e200e-b, e200e-c, e200e-usg2100, e200e-x1, e200e-x2, e200x3, e200x5, e200x7, eudemon 8080e, eudemon 8160e, eudemon usg5300, eudemon usg5500, eudemon usg9300, eudemon usg9500, eudemon1000, eudemon1000e-u, eudemon1000e-x, eudemon100e, eudemon200, eudemon300, eudemon500, eudemon8000e-x, h3c ar\(oem in\), ma5200g, me60, ne20, ne20e-x6, ne40, ne40e, ne40e\/80e, ne5000e, ne80, ne80e, nip100, nip1000, nip200, nip2100, nip2200, nip5100, s2300, s2700, s3300, s3300hi, s3700, s5300, s5300hi, s5306, s5700, s6300, s6700, s7700, s9300, svn2000, svn3000, svn5000, svn5300, wlan ac 6605
Vulnerable Versions:
v100r003c01spc100, v200r001c00, v200r001c00spc100, 0, v200r001c01, v200r002c00spc200, v100r005, v200r002, v600r001, v600r002, v600r003, v200r007, v200r001, v200r003, v300r003, v100r006, v600r005c00spc600, v200r005, v300r005, v300r007, v800r002, v100r001, v100r001c00, v100r002, v100r003, v100r002c02spc802b041, v100r001c01b019

Timeline

Official Publish: June 20th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.