CVE-2012-4960

CVE-2012-4960 describes a weakness in numerous Huawei network devices, including routers, switches, and security appliances, where stored passwords are encrypted using the DES algorithm. This vulnerability allows authenticated attackers to potentially recover cleartext passwords through brute-force attacks, as indicated by its CVSS score of 6.5 (medium severity) with an attack vector of network and low attack complexity. While there is an ExploitDB entry (EDB-38020) detailing password encryption for multiple Huawei products, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.