csirt@kutim:~/threat-intel/cve/CVE-2020-1810

Katalog CVE

CVSS 5.3 · Medium EPSS 0,45%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada huawei cloudengine 12800 firmware, huawei s5700 firmware +1 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Rincian

Terbit di NVD
9 Januari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
EPSS (30 hari)
0,45% peluang dieksploitasi; lebih tinggi dari 37,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
huawei cloudengine 12800 firmware Versi v100r003c00spc600
huawei cloudengine 12800 firmware Versi v100r003c10spc100
huawei cloudengine 12800 firmware Versi v100r005c00spc200
huawei cloudengine 12800 firmware Versi v100r005c00spc300
huawei cloudengine 12800 firmware Versi v100r005c10hp0001
huawei cloudengine 12800 firmware Versi v100r005c10spc100
huawei cloudengine 12800 firmware Versi v100r005c10spc200
huawei cloudengine 12800 firmware Versi v100r006c00
huawei cloudengine 12800 firmware Versi v200r001c00
huawei cloudengine 12800 firmware Versi v200r002c01
huawei cloudengine 12800 firmware Versi v200r002c10
huawei cloudengine 12800 firmware Versi v200r002c20
huawei cloudengine 12800 firmware Versi v200r005c10
huawei s5700 firmware Versi v200r005c00spc500
huawei s5700 firmware Versi v200r005c03
huawei s5700 firmware Versi v200r006c00spc100
huawei s5700 firmware Versi v200r006c00spc300
huawei s5700 firmware Versi v200r006c00spc500
huawei s5700 firmware Versi v200r007c00spc100
huawei s5700 firmware Versi v200r007c00spc500
huawei s6700 firmware Versi v200r005c00spc500
huawei s6700 firmware Versi v200r005c01

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.