What is the CVSS score of CVE-2012-4960?

CVE-2012-4960 has a CVSS 2.0 base score of 6.5 (Medium). CVSS vector: AV:N/AC:L/Au:S/C:P/I:P/A:P. EPSS exploitation probability: 12.3%.

Is there a public PoC exploit available for CVE-2012-4960?

Yes, a public proof-of-concept exploit is available for CVE-2012-4960. Prioritise patching immediately. EPSS: 12.3%.

Acu CVE-2012-4960

MEDIUM

Cryptographic Issues (CWE-310)

2013-06-20 cret@cert.org

Huawei Information Disclosure Acu Ar 19 29 49 Ar G3 Atn Cx200 Cx300 Cx600 E200 Usg2200 E200 Usg5100 E200E B E200E C E200E Usg2100 E200E X1 E200E X2 E200X3 E200X5 E200X7 Eudemon 8080E Eudemon 8160E Eudemon Usg5300 Eudemon Usg5500 Eudemon Usg9300 Eudemon Usg9500 Eudemon1000 Eudemon1000E U Eudemon1000E X Eudemon100E Eudemon200 Eudemon300 Eudemon500 Eudemon8000E X H3C Ar Oem In Ma5200G Me60 Ne20 Ne20E X6 Ne40 Ne40E Ne40E 80E Ne5000E Ne80 Ne80E Nip100 Nip1000 Nip200 Nip2100 Nip2200 Nip5100 S2300 S2700 S3300 S3300Hi S3700 S5300 S5300Hi S5306 S5700 S6300 S6700 S7700 S9300 Svn2000 Svn3000 Svn5000 Svn5300 Wlan Ac 6605

6.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jun 20, 2013 - 15:55 cve.org

MEDIUM 6.5

DescriptionCVE.org

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

AnalysisAI

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700,. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.3%.

Technical ContextAI

This vulnerability is classified under CWE-310. The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack. Affected products include: Huawei Acu, Huawei Ar 19\/29\/49, Huawei Ar G3, Huawei Atn, Huawei Cx200.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.