CVE-2020-1810 Weak cryptography in CloudEngine 12800;S5700;S6700
Attackers can exploit weak RSA SSL key exchange algorithms in Huawei switches to potentially leak sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-1810?
CVE-2020-1810 is a medium-severity vulnerability in CloudEngine 12800;S5700;S6700, published on 9 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.
Weakness: CWE-327
Which versions are affected by CVE-2020-1810?
It affects 3 products.
Products include Huawei Cloudengine 12800 Firmware, Huawei S5700 Firmware, Huawei S6700 Firmware.
How do I fix CVE-2020-1810?
No fix has been published for CVE-2020-1810 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-1810 being exploited?
There is no known exploitation of CVE-2020-1810 in the wild and no public exploit code.
Other vulnerabilities in CloudEngine 12800;S5700;S6700
- CVE-2016-6178 Other in n/a
- CVE-2020-9207 Auth bypass in CloudEngine 12800
- CVE-2021-40008 Denial of service in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
- CVE-2021-22328 Denial of service in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
- CVE-2021-22332 Use after free in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
Sources
Also known as GHSA-784w-6w6h-jjwp.