CVE-2020-1810 - Vulnerability Details

Vendors	Products
Huawei	Cloudengine 12800 Cloudengine 12800 Firmware S5700 S5700 Firmware S6700 S6700 Firmware

Link	Providers
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "CloudEngine 12800;S5700;S6700", "vendor": "n/a", "versions": [{"status": "affected", "version": "V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10"}, {"status": "affected", "version": "V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500"}, {"status": "affected", "version": "V200R005C00SPC500,V200R005C01"}]}], "descriptions": [{"lang": "en", "value": "There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information."}], "problemTypes": [{"descriptions": [{"description": "Weak Algorithm", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-01-21T23:00:44", "orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@huawei.com", "ID": "CVE-2020-1810", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "CloudEngine 12800;S5700;S6700", "version": {"version_data": [{"version_value": "V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10"}, {"version_value": "V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500"}, {"version_value": "V200R005C00SPC500,V200R005C01"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Weak Algorithm"}]}]}, "references": {"reference_data": [{"name": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en", "refsource": "MISC", "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:46:30.887Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en"}]}]}, "cveMetadata": {"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "assignerShortName": "huawei", "cveId": "CVE-2020-1810", "datePublished": "2020-01-09T17:44:54", "dateReserved": "2019-11-29T00:00:00", "dateUpdated": "2024-08-04T06:46:30.887Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : CloudEngine 12800;S5700;S6700 (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10 (string)

}

1 : { »

status : affected (string)

version : V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500 (string)

}

2 : { »

status : affected (string)

version : V200R005C00SPC500,V200R005C01 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Weak Algorithm (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2020-01-21T23:00:44 (string)

orgId : 25ac1063-e409-4190-8079-24548c77ea2e (string)

shortName : huawei (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@huawei.com (string)

ID : CVE-2020-1810 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : CloudEngine 12800;S5700;S6700 (string)

version : { »

version_data : [ »

0 : { »

version_value : V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10 (string)

}

1 : { »

version_value : V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500 (string)

}

2 : { »

version_value : V200R005C00SPC500,V200R005C01 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Weak Algorithm (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en (string)

refsource : MISC (string)

url : https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T06:46:30.887Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 25ac1063-e409-4190-8079-24548c77ea2e (string)

assignerShortName : huawei (string)

cveId : CVE-2020-1810 (string)

datePublished : 2020-01-09T17:44:54 (string)

dateReserved : 2019-11-29T00:00:00 (string)

dateUpdated : 2024-08-04T06:46:30.887Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00spc600:*:*:*:*:*:*:*", "matchCriteriaId": "8CAD1A04-54E8-4F24-A018-140F9FBD0562", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10spc100:*:*:*:*:*:*:*", "matchCriteriaId": "CA1E813D-57B1-449A-9513-3AFB083E116A", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc200:*:*:*:*:*:*:*", "matchCriteriaId": "9D33A009-B3C9-4894-9426-D51E5D82A189", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc300:*:*:*:*:*:*:*", "matchCriteriaId": "417BF51F-E61F-44C3-B479-102DFB3E9233", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10hp0001:*:*:*:*:*:*:*", "matchCriteriaId": "7386FB64-0713-424B-A755-D1CABB877817", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc100:*:*:*:*:*:*:*", "matchCriteriaId": "DF4B8058-BEC1-4978-B12F-A526879FB7C9", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc200:*:*:*:*:*:*:*", "matchCriteriaId": "02DB167B-D9CE-439C-8840-525E1A4BB079", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:*", "matchCriteriaId": "3C2DACA5-0AA6-419B-AC6A-8CC19326758E", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00:*:*:*:*:*:*:*", "matchCriteriaId": "4492E892-7BE5-413A-AD53-2D39BD6626F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c01:*:*:*:*:*:*:*", "matchCriteriaId": "6A7B1A3E-5D5A-4E3A-89F1-73DA7FF0F060", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c10:*:*:*:*:*:*:*", "matchCriteriaId": "DCC0FC04-05F0-4591-89EF-4E54D9A3ED8B", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c20:*:*:*:*:*:*:*", "matchCriteriaId": "B7353CA0-9073-4EBD-B2FF-6FAD43274E3D", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10:*:*:*:*:*:*:*", "matchCriteriaId": "433BD50B-C8A5-4F0B-8905-18131C9FD364", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE8A2875-0F7E-4790-A925-5999396B7578", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r005c00spc500:*:*:*:*:*:*:*", "matchCriteriaId": "4B3B076D-F61E-4BE0-B808-D86EB6A83D92", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:*", "matchCriteriaId": "5B18ABC1-A970-472A-A8BF-934D1180930E", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc100:*:*:*:*:*:*:*", "matchCriteriaId": "F56ADA0A-B3B1-4B6C-9800-EB28B61E3F03", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc300:*:*:*:*:*:*:*", "matchCriteriaId": "53A7B27E-CA45-44B7-9BE1-5B11D69BDDF4", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc500:*:*:*:*:*:*:*", "matchCriteriaId": "C8A24F24-F960-4F0F-A553-3C7EAE5C13E5", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc100:*:*:*:*:*:*:*", "matchCriteriaId": "8FF2F7D0-8A62-4B9B-9551-749178FEA120", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc500:*:*:*:*:*:*:*", "matchCriteriaId": "CCDCF4CA-48CF-4AEC-B3EC-7CD9EF9E3DA4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*", "matchCriteriaId": "E22D3CFF-3353-4EE2-8933-84F395469D0D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:s6700_firmware:v200r005c00spc500:*:*:*:*:*:*:*", "matchCriteriaId": "96FF5103-C97A-443A-8475-0E99A0175455", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:*", "matchCriteriaId": "F4979AA8-0D8E-4F37-A7DC-709BE4821D51", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA7AC10D-B0DD-4206-8642-134DDD585C06", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information."}, {"lang": "es", "value": "Existe una vulnerabilidad de algoritmo d\u00e9bil en algunos productos Huawei. Los productos afectados utilizan el algoritmo RSA en el algoritmo de intercambio de claves SSL que se ha considerado como un algoritmo d\u00e9bil. Los atacantes pueden explotar esta vulnerabilidad para filtrar cierta informaci\u00f3n."}], "id": "CVE-2020-1810", "lastModified": "2024-11-21T05:11:25.460", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-01-09T18:15:10.593", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-327"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00spc600:*:*:*:*:*:*:* (string)

matchCriteriaId : 8CAD1A04-54E8-4F24-A018-140F9FBD0562 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10spc100:*:*:*:*:*:*:* (string)

matchCriteriaId : CA1E813D-57B1-449A-9513-3AFB083E116A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc200:*:*:*:*:*:*:* (string)

matchCriteriaId : 9D33A009-B3C9-4894-9426-D51E5D82A189 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc300:*:*:*:*:*:*:* (string)

matchCriteriaId : 417BF51F-E61F-44C3-B479-102DFB3E9233 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10hp0001:*:*:*:*:*:*:* (string)

matchCriteriaId : 7386FB64-0713-424B-A755-D1CABB877817 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc100:*:*:*:*:*:*:* (string)

matchCriteriaId : DF4B8058-BEC1-4978-B12F-A526879FB7C9 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc200:*:*:*:*:*:*:* (string)

matchCriteriaId : 02DB167B-D9CE-439C-8840-525E1A4BB079 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:* (string)

matchCriteriaId : 3C2DACA5-0AA6-419B-AC6A-8CC19326758E (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00:*:*:*:*:*:*:* (string)

matchCriteriaId : 4492E892-7BE5-413A-AD53-2D39BD6626F6 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c01:*:*:*:*:*:*:* (string)

matchCriteriaId : 6A7B1A3E-5D5A-4E3A-89F1-73DA7FF0F060 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c10:*:*:*:*:*:*:* (string)

matchCriteriaId : DCC0FC04-05F0-4591-89EF-4E54D9A3ED8B (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c20:*:*:*:*:*:*:* (string)

matchCriteriaId : B7353CA0-9073-4EBD-B2FF-6FAD43274E3D (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10:*:*:*:*:*:*:* (string)

matchCriteriaId : 433BD50B-C8A5-4F0B-8905-18131C9FD364 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DE8A2875-0F7E-4790-A925-5999396B7578 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r005c00spc500:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B3B076D-F61E-4BE0-B808-D86EB6A83D92 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:* (string)

matchCriteriaId : 5B18ABC1-A970-472A-A8BF-934D1180930E (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc100:*:*:*:*:*:*:* (string)

matchCriteriaId : F56ADA0A-B3B1-4B6C-9800-EB28B61E3F03 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc300:*:*:*:*:*:*:* (string)

matchCriteriaId : 53A7B27E-CA45-44B7-9BE1-5B11D69BDDF4 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc500:*:*:*:*:*:*:* (string)

matchCriteriaId : C8A24F24-F960-4F0F-A553-3C7EAE5C13E5 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc100:*:*:*:*:*:*:* (string)

matchCriteriaId : 8FF2F7D0-8A62-4B9B-9551-749178FEA120 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc500:*:*:*:*:*:*:* (string)

matchCriteriaId : CCDCF4CA-48CF-4AEC-B3EC-7CD9EF9E3DA4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E22D3CFF-3353-4EE2-8933-84F395469D0D (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:huawei:s6700_firmware:v200r005c00spc500:*:*:*:*:*:*:* (string)

matchCriteriaId : 96FF5103-C97A-443A-8475-0E99A0175455 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:* (string)

matchCriteriaId : F4979AA8-0D8E-4F37-A7DC-709BE4821D51 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DA7AC10D-B0DD-4206-8642-134DDD585C06 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information. (string)

}

1 : { »

lang : es (string)

value : Existe una vulnerabilidad de algoritmo débil en algunos productos Huawei. Los productos afectados utilizan el algoritmo RSA en el algoritmo de intercambio de claves SSL que se ha considerado como un algoritmo débil. Los atacantes pueden explotar esta vulnerabilidad para filtrar cierta información. (string)

}

]

id : CVE-2020-1810 (string)

lastModified : 2024-11-21T05:11:25.460 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2020-01-09T18:15:10.593 (string)

references : [ »

0 : { »

source : psirt@huawei.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en (string)

}

]

sourceIdentifier : psirt@huawei.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-327 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object