peter bassill · operator
$ cve CVE-2012-4960 JSON

CVE-2012-4960 EXPLOIT

6.5
MEDIUM · CVSS 2.0 · EPSS 3.5% (pctl 89)

Patch early

A public exploit exists.

Description

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Scoring

CVSS6.5 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS3.45% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-310
On CISA KEVno
Public exploityes
Published2013-06-20
Last modified2026-06-16

Affected (40)

VendorProduct
huaweiacu
huaweiar 19\/29\/49
huaweiar g3
huaweiatn
huaweicx200
huaweicx300
huaweicx600
huaweie200 usg2200
huaweie200 usg5100
huaweie200e-b
huaweie200e-c
huaweie200e-usg2100
huaweie200e-x1
huaweie200e-x2
huaweie200x3
huaweie200x5
huaweie200x7
huaweieudemon 8080e
huaweieudemon 8160e
huaweieudemon usg5300
huaweieudemon usg5500
huaweieudemon usg9300
huaweieudemon usg9500
huaweieudemon1000
huaweieudemon1000e-u
huaweieudemon1000e-x
huaweieudemon100e
huaweieudemon200
huaweieudemon300
huaweieudemon500
huaweieudemon8000e-x
huaweih3c ar\(oem in\)
huaweima5200g
huaweime60
huaweine20
huaweine20e-x6
huaweine40
huaweine40e
huaweine40e\/80e
huaweine5000e

Public exploits

SourceTitleDate
exploit-dbHuawei (Multiple Products) - Password Encryption2012-11-13

References

→ the Explorer  ·  watch your stack  ·  NVD