cbcvebase.
CVE-2014-5394
published 2018-01-08

CVE-2014-5394: Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

PriorityP431medium5.9CVSS 3.0
AVNACHPRNUINSUCHINAN
EPSS
1.73%
77.5th percentile
Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
huaweis2300_firmware——
huaweis2700_firmware——
huaweis3300_firmware——
huaweis3700_firmware——
huaweis5300_firmware——
huaweis5300_firmware——
huaweis5300_firmware——
huaweis5700_firmware——
huaweis5700_firmware——
huaweis5700_firmware——
huaweis6300_firmware——
huaweis6300_firmware——
huaweis6300_firmware——
huaweis6700_firmware——
huaweis6700_firmware——
huaweis6700_firmware——
huaweis7700_firmware——
huaweis7700_firmware——
huaweis7700_firmware——
huaweis9300_firmware——
huaweis9300_firmware——
huaweis9300_firmware——
huaweis9300e_firmware——
huaweis9300e_firmware——
huaweis9300e_firmware——

CVSS provenance

nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.