Password Vulnerability in Huawei Networking Equipment

CVE-2012-4960

Summary

The vulnerability in Huawei networking equipment stems from the use of the outdated DES algorithm for stored passwords. This makes it significantly easier for attackers, particularly those with context-dependent knowledge, to execute brute-force attacks and obtain cleartext passwords. Affected devices include a broad range of products across Huawei's networking solutions, highlighting the importance of updating security practices and transitioning to stronger password management algorithms.

References