vendor:
Quidway series, CX600, ME60, AR 19/29/49
by:
SecurityFocus
4,3
CVSS
MEDIUM
Weak Password Encryption Weakness
327
CWE
Product Name: Quidway series, CX600, ME60, AR 19/29/49
Affected Version From: Huawei Quidway series, Huawei CX600 V600R001, Huawei CX600 V600R003C00SPC900, Huawei ME60 V600R002C07 and prior versions, AR 19/29/49 R2207 and prior versions
Affected Version To: Huawei Quidway series, Huawei CX600 V600R001, Huawei CX600 V600R003C00SPC900, Huawei ME60 V600R002C07 and prior versions, AR 19/29/49 R2207 and prior versions
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012
Weak Password Encryption Weakness in Multiple Huawei Products
Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The vulnerable products are Huawei Quidway series, Huawei CX600 V600R001, Huawei CX600 V600R003C00SPC900, Huawei ME60 V600R002C07 and prior versions, AR 19/29/49 R2207 and prior versions.
Mitigation:
Ensure that passwords are encrypted using a strong encryption algorithm.