CVE-2014-9692 : Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow attackers to figure out the RMCP+ session IDs of users and access the system with forged identities.

Published 2017-04-02 20:59:01

Updated 2017-04-05 23:53:05

Source Huawei Technologies

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2014-9692

Huawei » Tecal Rh1288 V2 Firmware
Versions up to, including, (<=) v100r002c00spc107
cpe:2.3:o:huawei:tecal_rh1288_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh1288 V2 » Version: N/A
Huawei » Tecal Rh2265 V2 Firmware » Version: V100r002c00
cpe:2.3:o:huawei:tecal_rh2265_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2265 V2 » Version: N/A
Huawei » Tecal Rh2285 V2 Firmware
Versions up to, including, (<=) v100r002c00spc115
cpe:2.3:o:huawei:tecal_rh2285_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2285 V2 » Version: N/A
Huawei » Tecal Rh2285h V2 Firmware
Versions up to, including, (<=) v100r002c00spc111
cpe:2.3:o:huawei:tecal_rh2285h_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2285h V2 » Version: N/A
Huawei » Tecal Rh2268 V2 Firmware » Version: V100r002c00
cpe:2.3:o:huawei:tecal_rh2268_v2_firmware:v100r002c00:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2268 V2 » Version: N/A
Huawei » Tecal Rh2288 V2 Firmware
Versions up to, including, (<=) v100r002c00spc117
cpe:2.3:o:huawei:tecal_rh2288_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2288 V2 » Version: N/A
Huawei » Tecal Rh2288h V2 Firmware
Versions up to, including, (<=) v100r002c00spc115
cpe:2.3:o:huawei:tecal_rh2288h_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2288h V2 » Version: N/A
Huawei » Tecal Rh2485 V2 Firmware
Versions up to, including, (<=) v100r002c00spc502
cpe:2.3:o:huawei:tecal_rh2485_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh2485 V2 » Version: N/A
Huawei » Tecal Rh5885 V2 Firmware
Versions up to, including, (<=) v100r001c02spc109
cpe:2.3:o:huawei:tecal_rh5885_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh5885 V2 » Version: N/A
Huawei » Tecal Rh5885 V3 Firmware
Versions up to, including, (<=) v100r003c01spc102
cpe:2.3:o:huawei:tecal_rh5885_v3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh5885 V3 » Version: N/A
Huawei » Tecal Rh5885h V3 Firmware
Versions up to, including, (<=) v100r003c00spc102
cpe:2.3:o:huawei:tecal_rh5885h_v3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Rh5885h V3 » Version: N/A
Huawei » Tecal Xh310 V2 Firmware
Versions up to, including, (<=) v100r001c00spc110
cpe:2.3:o:huawei:tecal_xh310_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Xh310 V2 » Version: N/A
Huawei » Tecal Xh311 V2 Firmware
Versions up to, including, (<=) v100r001c00spc110
cpe:2.3:o:huawei:tecal_xh311_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Xh311 V2 » Version: N/A
Huawei » Tecal Xh320 V2 Firmware
Versions up to, including, (<=) v100r001c00spc110
cpe:2.3:o:huawei:tecal_xh320_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Xh320 V2 » Version: N/A
Huawei » Tecal Xh621 V2 Firmware
Versions up to, including, (<=) v100r001c00spc106
cpe:2.3:o:huawei:tecal_xh621_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Xh621 V2 » Version: N/A
Huawei » Tecal Dh310 V2 Firmware
Versions up to, including, (<=) v100r001c00spc110
cpe:2.3:o:huawei:tecal_dh310_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Dh310 V2 » Version: N/A
Huawei » Tecal Dh320 V2 Firmware
Versions up to, including, (<=) v100r001c00spc106
cpe:2.3:o:huawei:tecal_dh320_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Dh320 V2 » Version: N/A
Huawei » Tecal Dh620 V2 Firmware
Versions up to, including, (<=) v100r001c00spc106
cpe:2.3:o:huawei:tecal_dh620_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Dh620 V2 » Version: N/A
Huawei » Tecal Dh621 V2 Firmware
Versions up to, including, (<=) v100r001c00spc107
cpe:2.3:o:huawei:tecal_dh621_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Dh621 V2 » Version: N/A
Huawei » Tecal Dh628 V2 Firmware
Versions up to, including, (<=) v100r001c00spc107
cpe:2.3:o:huawei:tecal_dh628_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Dh628 V2 » Version: N/A
Huawei » Tecal Bh620 V2 Firmware
Versions up to, including, (<=) v100r002c00spc107
cpe:2.3:o:huawei:tecal_bh620_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Bh620 V2 » Version: N/A
Huawei » Tecal Bh621 V2 Firmware
Versions up to, including, (<=) v100r002c00spc106
cpe:2.3:o:huawei:tecal_bh621_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Bh621 V2 » Version: N/A
Huawei » Tecal Bh622 V2 Firmware
Versions up to, including, (<=) v100r002c00spc110
cpe:2.3:o:huawei:tecal_bh622_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Bh622 V2 » Version: N/A
Huawei » Tecal Bh640 V2 Firmware
Versions up to, including, (<=) v100r002c00spc108
cpe:2.3:o:huawei:tecal_bh640_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Bh640 V2 » Version: N/A
Huawei » Tecal Ch121 Firmware
Versions up to, including, (<=) v100r001c00spc180
cpe:2.3:o:huawei:tecal_ch121_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch121 » Version: N/A
Huawei » Tecal Ch140 Firmware
Versions up to, including, (<=) v100r001c00spc110
cpe:2.3:o:huawei:tecal_ch140_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch140 » Version: N/A
Huawei » Tecal Ch220 Firmware
Versions up to, including, (<=) v100r001c00spc180
cpe:2.3:o:huawei:tecal_ch220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch220 » Version: N/A
Huawei » Tecal Ch221 Firmware
Versions up to, including, (<=) v100r001c00spc180
cpe:2.3:o:huawei:tecal_ch221_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch221 » Version: N/A
Huawei » Tecal Ch222 Firmware
Versions up to, including, (<=) v100r002c00spc180
cpe:2.3:o:huawei:tecal_ch222_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch222 » Version: N/A
Huawei » Tecal Ch240 Firmware
Versions up to, including, (<=) v100r001c00spc180
cpe:2.3:o:huawei:tecal_ch240_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch240 » Version: N/A
Huawei » Tecal Ch242 Firmware
Versions up to, including, (<=) v100r001c00spc180
cpe:2.3:o:huawei:tecal_ch242_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch242 » Version: N/A
Huawei » Tecal Ch242 V3 Firmware
Versions up to, including, (<=) v100r001c00spc110
cpe:2.3:o:huawei:tecal_ch242_v3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tecal Ch242 V3 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2014-9692

EPSS FAQ

0.19%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-9692

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2014-9692

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2014-9692

http://www.huawei.com/en/psirt/security-advisories/hw-408100

Security Advisory-Multiple Vulnerabilities on Huawei Tecal
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2014-9692

Products affected by CVE-2014-9692

Exploit prediction scoring system (EPSS) score for CVE-2014-9692

CVSS scores for CVE-2014-9692

CWE ids for CVE-2014-9692

References for CVE-2014-9692