CVE-2014-5394: Huawei s2300 Firmware

Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

Affected products

• Huawei s2300 Firmware: version v100r006c05 only
• Huawei s2700 Firmware: version v100r006c05 only
• Huawei s3300 Firmware: version v100r006c05 only
• Huawei s3700 Firmware: version v100r006c05 only
• Huawei s5300 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc300 only
• Huawei s5700 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc300 only
• Huawei s6300 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc300 only
• Huawei s6700 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc300 only
• Huawei s7700 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc500 only
• Huawei s9300 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc500 only
• Huawei s9300e Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc500 only
• Huawei s9700 Firmware: version v200r001c00spc300 only; version v200r002c00spc300 only; version v200r003c00spc500 only

Published 2018-01-08. Last modified 2026-06-17.