Read the docs
TI-2020-01748 Aliases CVE-2020-1810GHSA-784w-6w6h-jjwp

Broken or risky cryptographic algorithm in CloudEngine 12800;S5700;S6700

Priority LOW 24CWE-327Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-327.

Summary

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Why it matters now

EPSS 0.00452 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—CloudEngine 12800;S5700;S6700V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10; V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500; V200R005C00SPC500,V200R005C01—No fix listedCNA
  • CloudEngine 12800;S5700;S6700 Vendor— Affected V100R003C00SPC600,V100R003C10SPC100,V100R005C00SPC200,V100R005C00SPC300,V100R005C10HP0001,V100R005C10SPC100,V100R005C10SPC200,V100R006C00,V200R001C00,V200R002C01,V200R002C10,V200R002C20,V200R005C10; V200R005C00SPC500,V200R005C03,V200R006C00SPC100,V200R006C00SPC300,V200R006C00SPC500,V200R007C00SPC100,V200R007C00SPC500; V200R005C00SPC500,V200R005C01 Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00spc600:*:*:*:*:*:*:*v100r003c00spc600VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10spc100:*:*:*:*:*:*:*v100r003c10spc100VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc200:*:*:*:*:*:*:*v100r005c00spc200VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc300:*:*:*:*:*:*:*v100r005c00spc300VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10hp0001:*:*:*:*:*:*:*v100r005c10hp0001VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc100:*:*:*:*:*:*:*v100r005c10spc100VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc200:*:*:*:*:*:*:*v100r005c10spc200VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:*v100r006c00VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00:*:*:*:*:*:*:*v200r001c00VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c01:*:*:*:*:*:*:*v200r002c01VulnerableHuawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00spc600:*:*:*:*:*:*:* Versions v100r003c00spc600 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c10spc100:*:*:*:*:*:*:* Versions v100r003c10spc100 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc200:*:*:*:*:*:*:* Versions v100r005c00spc200 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c00spc300:*:*:*:*:*:*:* Versions v100r005c00spc300 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10hp0001:*:*:*:*:*:*:* Versions v100r005c10hp0001 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc100:*:*:*:*:*:*:* Versions v100r005c10spc100 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r005c10spc200:*:*:*:*:*:*:* Versions v100r005c10spc200 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r006c00:*:*:*:*:*:*:* Versions v100r006c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00:*:*:*:*:*:*:* Versions v200r001c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c01:*:*:*:*:*:*:* Versions v200r002c01 Vulnerable ·Huawei
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c10:*:*:*:*:*:*:*v200r002c10VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c20:*:*:*:*:*:*:*v200r002c20VulnerableHuawei
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10:*:*:*:*:*:*:*v200r005c10VulnerableHuawei
cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r005c00spc500:*:*:*:*:*:*:*v200r005c00spc500VulnerableHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:*v200r005c03VulnerableHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc100:*:*:*:*:*:*:*v200r006c00spc100VulnerableHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc300:*:*:*:*:*:*:*v200r006c00spc300VulnerableHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc500:*:*:*:*:*:*:*v200r006c00spc500VulnerableHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc100:*:*:*:*:*:*:*v200r007c00spc100VulnerableHuawei
cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc500:*:*:*:*:*:*:*v200r007c00spc500VulnerableHuawei
cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:s6700_firmware:v200r005c00spc500:*:*:*:*:*:*:*v200r005c00spc500VulnerableHuawei
cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:*v200r005c01VulnerableHuawei
cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c10:*:*:*:*:*:*:* Versions v200r002c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c20:*:*:*:*:*:*:* Versions v200r002c20 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10:*:*:*:*:*:*:* Versions v200r005c10 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r005c00spc500:*:*:*:*:*:*:* Versions v200r005c00spc500 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:* Versions v200r005c03 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc100:*:*:*:*:*:*:* Versions v200r006c00spc100 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc300:*:*:*:*:*:*:* Versions v200r006c00spc300 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r006c00spc500:*:*:*:*:*:*:* Versions v200r006c00spc500 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc100:*:*:*:*:*:*:* Versions v200r007c00spc100 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s5700_firmware:v200r007c00spc500:*:*:*:*:*:*:* Versions v200r007c00spc500 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:s6700_firmware:v200r005c00spc500:*:*:*:*:*:*:* Versions v200r005c00spc500 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:* Versions v200r005c01 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1810
  2. 2026-10-03 Alias added: GHSA-784w-6w6h-jjwp

References

Advisory 1

  • TI-2016-05301 Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices… CVSS 3.0CRITICAL 9.8
  • TI-2017-12675 Improper certificate validation in Huawei… CVSS 3.0CRITICAL 9.8
  • TI-2020-07360 Improper authentication in Huawei CloudEngine 12800 CVSS 3.1HIGH 7.8
  • TI-2020-07334 Memory leak in Huawei CloudEngine 12800 CVSS 3.1HIGH 7.5
  • TI-2017-11262 Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine… CVSS 3.0HIGH 7.5
  • TI-2017-05722 Improper input validation in Huawei AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine… CVSS 3.0HIGH 7.5
See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences