CVE-2012-4960 EXPLOIT
Patch early
A public exploit exists.
Description
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 3.45% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-310 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2013-06-20 |
| Last modified | 2026-06-16 |
Affected (40)
| Vendor | Product |
|---|---|
| huawei | acu |
| huawei | ar 19\/29\/49 |
| huawei | ar g3 |
| huawei | atn |
| huawei | cx200 |
| huawei | cx300 |
| huawei | cx600 |
| huawei | e200 usg2200 |
| huawei | e200 usg5100 |
| huawei | e200e-b |
| huawei | e200e-c |
| huawei | e200e-usg2100 |
| huawei | e200e-x1 |
| huawei | e200e-x2 |
| huawei | e200x3 |
| huawei | e200x5 |
| huawei | e200x7 |
| huawei | eudemon 8080e |
| huawei | eudemon 8160e |
| huawei | eudemon usg5300 |
| huawei | eudemon usg5500 |
| huawei | eudemon usg9300 |
| huawei | eudemon usg9500 |
| huawei | eudemon1000 |
| huawei | eudemon1000e-u |
| huawei | eudemon1000e-x |
| huawei | eudemon100e |
| huawei | eudemon200 |
| huawei | eudemon300 |
| huawei | eudemon500 |
| huawei | eudemon8000e-x |
| huawei | h3c ar\(oem in\) |
| huawei | ma5200g |
| huawei | me60 |
| huawei | ne20 |
| huawei | ne20e-x6 |
| huawei | ne40 |
| huawei | ne40e |
| huawei | ne40e\/80e |
| huawei | ne5000e |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Huawei (Multiple Products) - Password Encryption | 2012-11-13 |
References
→ the Explorer · watch your stack · NVD