CVE-2014-5394 Information disclosure in n/a
Remote attackers can enumerate usernames on Huawei Campus switches via SSH maintenance terminal access, exposing sensitive user information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-5394?
CVE-2014-5394 is a medium-severity vulnerability in n/a, published on 8 Jan 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
Weakness: CWE-200
Which versions are affected by CVE-2014-5394?
It affects 12 products.
Products include Huawei S2300 Firmware, Huawei S2700 Firmware, Huawei S3300 Firmware, Huawei S3700 Firmware, Huawei S5300 Firmware, Huawei S5700 Firmware and 6 more.
How do I fix CVE-2014-5394?
No fix has been published for CVE-2014-5394 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-5394 being exploited?
There is no known exploitation of CVE-2014-5394 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2014-3223 Denial of service in S9300,S2300,S3300,S5300,S6300 S9300 with software V100R006C00SPC500??S9300 with software V100R006C00SPC800,S2300,S3300,S5300,S6300 with software V100R006C00SPC800,V100R006C01SPC100, V100R006C03
- CVE-2015-8676 Denial of service in n/a
- CVE-2015-8677 Denial of service in n/a
Sources
Also known as GHSA-ghjw-c2v5-8vjh.