What’s Vulnerable › Vulnerabilities

CVE-2012-4960

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-06-20 · updated 2026-06-16
• Weakness: CWE-310

Description

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Affected products

• Huawei Acu: v100r003c01spc100, v200r001c00, v200r001c00spc100
• Huawei Ar 19/29/49: through r2207
• Huawei Ar G3: v200r001c00, v200r001c01, v200r002c00spc200
• Huawei Atn: v200r001c00, v200r001c01
• Huawei Cx200: v100r005
• Huawei Cx300: v100r005
• Huawei Cx600: v200r002, v600r001, v600r002, v600r003
• Huawei E200 Usg2200: through v200r003c00
• Huawei E200 Usg5100: through v200r003c00
• Huawei E200E-B: through v100r005c01
• Huawei E200E-C: through v200r003c00
• Huawei E200E-Usg2100: through v100r005c01
• Huawei E200E-X1: through v100r005c01
• Huawei E200E-X2: through v100r005c01
• Huawei E200X3: through v200r003c00
• Huawei E200X5: through v200r003c00
• Huawei E200X7: through v200r003c00
• Huawei Eudemon1000: through v200r006c02
• Huawei Eudemon1000E-U: through v200r001
• Huawei Eudemon1000E-X: through v200r002
• Huawei Eudemon100E: v200r007
• Huawei Eudemon200: v200r001
• Huawei Eudemon300: through v200r006c02
• Huawei Eudemon500: through v200r006c02
• Huawei Eudemon8000E-X: through v200r001c00spc600
• Huawei Eudemon 8080E: through v100r003c00
• Huawei Eudemon 8160E: through v100r003c00
• Huawei Eudemon Usg5300: through v200r001
• Huawei Eudemon Usg5500: through v200r002
• Huawei Eudemon Usg9300: through v100r003c00

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htm
• http://www.kb.cert.org/vuls/id/948096
• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-u_194373.htm
• http://www.kb.cert.org/vuls/id/948096

Get alerted when CVE-2012-4960 or the next vulnerability affects your stack