CVE-2014-5394 : Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the ma

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

Published 2018-01-08 19:29:01

Updated 2018-01-29 19:03:59

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2014-5394

EPSS FAQ

0.20%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 57 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-5394

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2014-5394

https://exchange.xforce.ibmcloud.com/vulnerabilities/97763

Huawei Campus Switch SSH Username information disclosure CVE-2014-5394 Vulnerability Report
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/69302

Huawei Campus Series Switches User Enumeration Weakness
Third Party Advisory;VDB Entry
http://www.huawei.com/us/psirt/security-advisories/2014/hw-362701

Security Advisory- SSH Username Information Disclosure Vulnerability in Huawei Campus Switch
Vendor Advisory

Products affected by CVE-2014-5394

Huawei » S5300 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s5300_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300 » Version: N/A
Huawei » S5300 Firmware » Version: V200r003c00spc300
cpe:2.3:o:huawei:s5300_firmware:v200r003c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300 » Version: N/A
Huawei » S5300 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s5300_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5300 » Version: N/A
Huawei » S7700 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s7700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s7700_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S7700 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s7700_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S7700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s9700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s9700_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9700 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s9700_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9700 » Version: N/A
Huawei » S9300 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s9300_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s9300_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S9300 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s9300_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300 » Version: N/A
Huawei » S2300 Firmware » Version: V100r006c05
cpe:2.3:o:huawei:s2300_firmware:v100r006c05:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2300 » Version: N/A
Huawei » S3300 Firmware » Version: V100r006c05
cpe:2.3:o:huawei:s3300_firmware:v100r006c05:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S3300 » Version: N/A
Huawei » S5700 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s5700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r003c00spc300
cpe:2.3:o:huawei:s5700_firmware:v200r003c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S5700 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s5700_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S5700 » Version: N/A
Huawei » S6300 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s6300_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6300 » Version: N/A
Huawei » S6300 Firmware » Version: V200r003c00spc300
cpe:2.3:o:huawei:s6300_firmware:v200r003c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6300 » Version: N/A
Huawei » S6300 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s6300_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6300 » Version: N/A
Huawei » S6700 Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s6700_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r003c00spc300
cpe:2.3:o:huawei:s6700_firmware:v200r003c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S6700 Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s6700_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S6700 » Version: N/A
Huawei » S9300e Firmware » Version: V200r003c00spc500
cpe:2.3:o:huawei:s9300e_firmware:v200r003c00spc500:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300e » Version: N/A
Huawei » S9300e Firmware » Version: V200r001c00spc300
cpe:2.3:o:huawei:s9300e_firmware:v200r001c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300e » Version: N/A
Huawei » S9300e Firmware » Version: V200r002c00spc300
cpe:2.3:o:huawei:s9300e_firmware:v200r002c00spc300:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S9300e » Version: N/A
Huawei » S2700 Firmware » Version: V100r006c05
cpe:2.3:o:huawei:s2700_firmware:v100r006c05:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S2700 » Version: N/A
Huawei » S3700 Firmware » Version: V100r006c05
cpe:2.3:o:huawei:s3700_firmware:v100r006c05:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » S3700 » Version: N/A

Vulnerability Details : CVE-2014-5394

Exploit prediction scoring system (EPSS) score for CVE-2014-5394

CVSS scores for CVE-2014-5394

CWE ids for CVE-2014-5394

References for CVE-2014-5394

Products affected by CVE-2014-5394