What’s Vulnerable › Vulnerabilities

CVE-2014-5394

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-08 · updated 2026-06-17
• Weakness: CWE-200

Description

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

Affected products

• Huawei S2300 Firmware: v100r006c05
• Huawei S2700 Firmware: v100r006c05
• Huawei Technologies Co., Ltd. S3300: v100r006c05
• Huawei S3700 Firmware: v100r006c05
• Huawei S5300 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc300
• Huawei S5700 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc300
• Huawei S6300 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc300
• Huawei S6700 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc300
• Huawei S7700 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc500
• Huawei S9300 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc500
• Huawei S9300E Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc500
• Huawei S9700 Firmware: v200r001c00spc300, v200r002c00spc300, v200r003c00spc500

References

• http://www.huawei.com/us/psirt/security-advisories/2014/hw-362701
• http://www.securityfocus.com/bid/69302
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97763
• http://www.huawei.com/us/psirt/security-advisories/2014/hw-362701
• http://www.securityfocus.com/bid/69302
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97763

Get alerted when CVE-2014-5394 or the next vulnerability affects your stack