CVE-2017-17305

2018-08-2113:00:00

huawei

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.

CNA Affected

[
  {
    "product": "USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "USG2205BSR V300R001C10SPC600"
      },
      {
        "status": "affected",
        "version": "USG2220BSR V300R001C00"
      },
      {
        "status": "affected",
        "version": "USG5120BSR V300R001C00"
      },
      {
        "status": "affected",
        "version": "USG5150BSR V300R001C00"
      }
    ]
  }
]