CVE-2014-5394: Infoleak
Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-5394?
CVE-2014-5394 refers to a vulnerability in multiple Huawei Campus switches that allows remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
Which software versions are affected by CVE-2014-5394?
Huawei S9300 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc500, S9300e Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc500, S7700 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc500, S9700 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc500, S5700 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, S6700 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, S5300 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, S6300 Firmware v200r001c00spc300, v200r002c00spc300, v200r003c00spc300, S2300 Firmware v100r006c05, S2700 Firmware v100r006c05, S3300 Firmware v100r006c05, S3700 Firmware v100r006c05 are affected by CVE-2014-5394.
What is the severity of CVE-2014-5394?
CVE-2014-5394 has a severity rating of 5.9 (medium).
How can I fix CVE-2014-5394?
To fix CVE-2014-5394, it is recommended to apply the latest firmware updates provided by Huawei.
Where can I find more information about CVE-2014-5394?
You can find more information about CVE-2014-5394 on the Huawei website, SecurityFocus, and IBM X-Force Exchange.