CVE-2020-1810

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-09 · updated 2026-06-17
Weakness: CWE-327

Description

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Affected products

CloudEngine 12800: v100r003c00spc600, v100r003c10spc100, v100r005c00spc200, v100r005c00spc300, v100r005c10hp0001, v100r005c10spc100 (+7)
Huawei S5700 Firmware: v200r005c00spc500, v200r005c03, v200r006c00spc100, v200r006c00spc300, v200r006c00spc500, v200r007c00spc100 (+1)
Huawei S6700 Firmware: v200r005c00spc500, v200r005c01

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en

Get alerted when CVE-2020-1810 or the next vulnerability affects your stack