5.9

CVE-2014-5394

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ S9300 Firmware Versionv200r001c00spc300
   Huawei ≫ S9300 Version-
Huawei ≫ S9300 Firmware Versionv200r002c00spc300
   Huawei ≫ S9300 Version-
Huawei ≫ S9300 Firmware Versionv200r003c00spc500
   Huawei ≫ S9300 Version-
Huawei ≫ S9300e Firmware Versionv200r001c00spc300
   Huawei ≫ S9300e Version-
Huawei ≫ S9300e Firmware Versionv200r002c00spc300
   Huawei ≫ S9300e Version-
Huawei ≫ S9300e Firmware Versionv200r003c00spc500
   Huawei ≫ S9300e Version-
Huawei ≫ S7700 Firmware Versionv200r001c00spc300
   Huawei ≫ S7700 Version-
Huawei ≫ S7700 Firmware Versionv200r002c00spc300
   Huawei ≫ S7700 Version-
Huawei ≫ S7700 Firmware Versionv200r003c00spc500
   Huawei ≫ S7700 Version-
Huawei ≫ S9700 Firmware Versionv200r001c00spc300
   Huawei ≫ S9700 Version-
Huawei ≫ S9700 Firmware Versionv200r002c00spc300
   Huawei ≫ S9700 Version-
Huawei ≫ S9700 Firmware Versionv200r003c00spc500
   Huawei ≫ S9700 Version-
Huawei ≫ S5700 Firmware Versionv200r001c00spc300
   Huawei ≫ S5700 Version-
Huawei ≫ S5700 Firmware Versionv200r002c00spc300
   Huawei ≫ S5700 Version-
Huawei ≫ S5700 Firmware Versionv200r003c00spc300
   Huawei ≫ S5700 Version-
Huawei ≫ S6700 Firmware Versionv200r001c00spc300
   Huawei ≫ S6700 Version-
Huawei ≫ S6700 Firmware Versionv200r002c00spc300
   Huawei ≫ S6700 Version-
Huawei ≫ S6700 Firmware Versionv200r003c00spc300
   Huawei ≫ S6700 Version-
Huawei ≫ S5300 Firmware Versionv200r001c00spc300
   Huawei ≫ S5300 Version-
Huawei ≫ S5300 Firmware Versionv200r002c00spc300
   Huawei ≫ S5300 Version-
Huawei ≫ S5300 Firmware Versionv200r003c00spc300
   Huawei ≫ S5300 Version-
Huawei ≫ S6300 Firmware Versionv200r001c00spc300
   Huawei ≫ S6300 Version-
Huawei ≫ S6300 Firmware Versionv200r002c00spc300
   Huawei ≫ S6300 Version-
Huawei ≫ S6300 Firmware Versionv200r003c00spc300
   Huawei ≫ S6300 Version-
Huawei ≫ S2300 Firmware Versionv100r006c05
   Huawei ≫ S2300 Version-
Huawei ≫ S2700 Firmware Versionv100r006c05
   Huawei ≫ S2700 Version-
Huawei ≫ S3300 Firmware Versionv100r006c05
   Huawei ≫ S3300 Version-
Huawei ≫ S3700 Firmware Versionv100r006c05
   Huawei ≫ S3700 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.43% 0.614
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/bid/69302
Third Party Advisory
VDB Entry