CVE-2012-4960: Huawei Acu

Medium severity, CVSS 6.5. EPSS: 3.5% chance of exploitation in the next 30 days.

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Affected products

  • Huawei Acu: version v100r003c01spc100 only; version v200r001c00 only; version v200r001c00spc100 only
  • Huawei Ar 19/29/49: up to and including r2207
  • Huawei Ar g3: version v200r001c00 only; version v200r001c01 only; version v200r002c00spc200 only
  • Huawei Atn: version v200r001c00 only; version v200r001c01 only
  • Huawei CX200: version v100r005 only
  • Huawei CX300: version v100r005 only
  • Huawei CX600: version v200r002 only; version v600r001 only; version v600r002 only; version v600r003 only
  • Huawei e200 USG2200: up to and including v200r003c00
  • Huawei e200 USG5100: up to and including v200r003c00
  • Huawei e200e-B: up to and including v100r005c01
  • Huawei e200e-C: up to and including v200r003c00
  • Huawei e200e-USG2100: up to and including v100r005c01
  • Huawei e200e-x1: up to and including v100r005c01
  • Huawei e200e-x2: up to and including v100r005c01
  • Huawei e200x3: up to and including v200r003c00
  • Huawei e200x5: up to and including v200r003c00
  • Huawei e200x7: up to and including v200r003c00
  • Huawei EUDEMON1000: up to and including v200r006c02
  • Huawei EUDEMON1000E-U: up to and including v200r001
  • Huawei EUDEMON1000E-X: up to and including v200r002
  • Huawei EUDEMON100E: version v200r007 only
  • Huawei EUDEMON200: version v200r001 only
  • Huawei EUDEMON300: up to and including v200r006c02
  • Huawei EUDEMON500: up to and including v200r006c02
  • Huawei EUDEMON8000E-X: up to and including v200r001c00spc600
  • and 41 more

Published 2013-06-20. Last modified 2026-06-16.