← Vulnerability feed

Vulnerability record · CVE-2020-1810 · published 9 January 2020

CVE-2020-1810: Huawei cloudengine 12800 firmware broken cryptographic algorithm vulnerability

Huawei · Cloudengine 12800 Firmware

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

5.3 CVSS 3.1 Medium EPSS 0.45% · top 62.1% CWE-327 · Broken cryptographic algorithm
5.3CVSS 3.1 base score, v2 5.0
0.45%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en Vendor Advisory

Track CVE-2020-1810 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%9.8CVE-2016-6178Huawei ne5000e firmware improper input validation vulnerabilityHuawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with s…EPSS 3.0%8.6CVE-2019-5254Huawei ap2000 firmware out-of-bounds read vulnerabilityCertain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secosp…EPSS 0.75%8.1CVE-2016-4087Huawei s12700 firmware improper input validation vulnerabilityHuawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enable…EPSS 1.5%7.8CVE-2020-9207Huawei cloudengine 12800 firmware improper authentication vulnerabilityThere is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. A…EPSS 0.57%7.5CVE-2021-40008Huawei cloudengine 7800 firmware vulnerabilityThere is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 a…EPSS 0.68%7.5CVE-2021-37129Huawei ips module firmware out-of-bounds write vulnerabilityThere is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly v…EPSS 0.68%7.5CVE-2021-22357Huawei s12700 firmware improper input validation vulnerabilityThere is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to validating inputs insufficiently. A…EPSS 0.70%

Source: NIST National Vulnerability Database (record CVE-2020-1810), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.