Lucene search

[email protected]NVD:CVE-2017-17301

HistoryFeb 15, 2018 - 4:29 p.m.

CVE-2017-17301

2018-02-1516:29:03

CWE-295

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR2200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 5800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 6800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 7800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, DP300 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, TE30 V100R001C10, TE60 V100R003C00, V500R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, ViewPoint 8660 V100R008C02, V100R008C03, eSpace IAD V300R002C01, eSpace U1981 V200R003C20, V200R003C30, eSpace USM V100R001C01, V300R001C00 have a weak cryptography vulnerability. Due to not properly some values in the certificates, an unauthenticated remote attacker could forges a specific RSA certificate and exploits the vulnerability to pass identity authentication and logs into the target device to obtain permissions configured for the specific user name.

Affected configurations

NVD

Node

huaweiar120-s_firmwareMatchv200r005c32

huaweiar120-s_firmwareMatchv200r006c10

huaweiar120-s_firmwareMatchv200r007c00

huaweiar120-s_firmwareMatchv200r008c20

AND

huaweiar120-sMatch-

Node

huaweiar1200_firmwareMatchv200r005c20

huaweiar1200_firmwareMatchv200r005c32

huaweiar1200_firmwareMatchv200r006c10

huaweiar1200_firmwareMatchv200r007c00

huaweiar1200_firmwareMatchv200r007c01

huaweiar1200_firmwareMatchv200r007c02

huaweiar1200_firmwareMatchv200r008c20

AND

huaweiar1200Match-

Node

huaweiar1200-s_firmwareMatchv200r005c32

huaweiar1200-s_firmwareMatchv200r006c10

huaweiar1200-s_firmwareMatchv200r007c00

huaweiar1200-s_firmwareMatchv200r008c20

AND

huaweiar1200-sMatch-

Node

huaweiar150_firmwareMatchv200r006c10

huaweiar150_firmwareMatchv200r007c00

huaweiar150_firmwareMatchv200r007c01

huaweiar150_firmwareMatchv200r007c02

huaweiar150_firmwareMatchv200r008c20

AND

huaweiar150Match-

Node

huaweiar160_firmwareMatchv200r005c32

huaweiar160_firmwareMatchv200r006c10

huaweiar160_firmwareMatchv200r007c00

huaweiar160_firmwareMatchv200r007c01

huaweiar160_firmwareMatchv200r007c02

huaweiar160_firmwareMatchv200r008c20

AND

huaweiar160Match-

Node

huaweiar200_firmwareMatchv200r005c32

huaweiar200_firmwareMatchv200r006c10

huaweiar200_firmwareMatchv200r007c00

huaweiar200_firmwareMatchv200r007c01

huaweiar200_firmwareMatchv200r008c20

AND

huaweiar200Match-

Node

huaweiar200-s_firmwareMatchv200r005c32

huaweiar200-s_firmwareMatchv200r006c10

huaweiar200-s_firmwareMatchv200r007c00

huaweiar200-s_firmwareMatchv200r007c01

huaweiar200-s_firmwareMatchv200r008c20

AND

huaweiar200-sMatch-

Node

huaweiar2200_firmwareMatchv200r005c20

huaweiar2200_firmwareMatchv200r005c32

huaweiar2200_firmwareMatchv200r006c10

huaweiar2200_firmwareMatchv200r007c00

huaweiar2200_firmwareMatchv200r007c01

huaweiar2200_firmwareMatchv200r007c02

huaweiar2200_firmwareMatchv200r008c20

AND

huaweiar2200Match-

Node

huaweiar2200-s_firmwareMatchv200r005c32

huaweiar2200-s_firmwareMatchv200r006c10

huaweiar2200-s_firmwareMatchv200r007c00

huaweiar2200-s_firmwareMatchv200r008c20

AND

huaweiar2200-sMatch-

Node

huaweiar3200_firmwareMatchv200r005c32

huaweiar3200_firmwareMatchv200r006c10

huaweiar3200_firmwareMatchv200r006c11

huaweiar3200_firmwareMatchv200r007c00

huaweiar3200_firmwareMatchv200r007c01

huaweiar3200_firmwareMatchv200r007c02

huaweiar3200_firmwareMatchv200r008c00

huaweiar3200_firmwareMatchv200r008c10

huaweiar3200_firmwareMatchv200r008c20

huaweiar3200_firmwareMatchv200r008c30

AND

huaweiar3200Match-

Node

huaweiar3600_firmwareMatchv200r006c10

huaweiar3600_firmwareMatchv200r007c00

huaweiar3600_firmwareMatchv200r007c01

huaweiar3600_firmwareMatchv200r008c20

AND

huaweiar3600Match-

Node

huaweiar510_firmwareMatchv200r005c32

huaweiar510_firmwareMatchv200r006c10

huaweiar510_firmwareMatchv200r007c00

huaweiar510_firmwareMatchv200r008c20

AND

huaweiar510Match-

Node

huaweicloudengine_12800_firmwareMatchv100r003c00

huaweicloudengine_12800_firmwareMatchv100r003c10

huaweicloudengine_12800_firmwareMatchv100r005c00

huaweicloudengine_12800_firmwareMatchv100r005c10

huaweicloudengine_12800_firmwareMatchv100r006c00

huaweicloudengine_12800_firmwareMatchv200r001c00

AND

huaweicloudengine_12800Match-

Node

huaweicloudengine_5800_firmwareMatchv100r003c00

huaweicloudengine_5800_firmwareMatchv100r003c10

huaweicloudengine_5800_firmwareMatchv100r005c00

huaweicloudengine_5800_firmwareMatchv100r005c10

huaweicloudengine_5800_firmwareMatchv100r006c00

huaweicloudengine_5800_firmwareMatchv200r001c00

AND

huaweicloudengine_5800Match-

Node

huaweicloudengine_6800_firmwareMatchv100r003c00

huaweicloudengine_6800_firmwareMatchv100r003c10

huaweicloudengine_6800_firmwareMatchv100r005c00

huaweicloudengine_6800_firmwareMatchv100r005c10

huaweicloudengine_6800_firmwareMatchv100r006c00

huaweicloudengine_6800_firmwareMatchv200r001c00

AND

huaweicloudengine_6800Match-

Node

huaweicloudengine_7800_firmwareMatchv100r003c00

huaweicloudengine_7800_firmwareMatchv100r003c10

huaweicloudengine_7800_firmwareMatchv100r005c00

huaweicloudengine_7800_firmwareMatchv100r005c10

huaweicloudengine_7800_firmwareMatchv100r006c00

huaweicloudengine_7800_firmwareMatchv200r001c00

AND

huaweicloudengine_7800Match-

Node

huaweidp300_firmwareMatchv500r002c00

AND

huaweidp300Match-

Node

huaweismc2.0_firmwareMatchv100r003c10

huaweismc2.0_firmwareMatchv100r005c00

huaweismc2.0_firmwareMatchv500r002c00

AND

huaweismc2.0Match-

Node

huaweisrg1300_firmwareMatchv200r005c32

huaweisrg1300_firmwareMatchv200r006c10

huaweisrg1300_firmwareMatchv200r007c00

huaweisrg1300_firmwareMatchv200r007c02

huaweisrg1300_firmwareMatchv200r008c20

AND

huaweisrg1300Match-

Node

huaweisrg2300_firmwareMatchv200r005c32

huaweisrg2300_firmwareMatchv200r006c10

huaweisrg2300_firmwareMatchv200r007c00

huaweisrg2300_firmwareMatchv200r007c02

huaweisrg2300_firmwareMatchv200r008c20

AND

huaweisrg2300Match-

Node

huaweisrg3300_firmwareMatchv200r005c32

huaweisrg3300_firmwareMatchv200r006c10

huaweisrg3300_firmwareMatchv200r007c00

huaweisrg3300_firmwareMatchv200r008c20

AND

huaweisrg3300Match-

Node

huaweite30_firmwareMatchv100r001c10

AND

huaweite30Match-

Node

huaweite60_firmwareMatchv100r003c00

huaweite60_firmwareMatchv500r002c00

AND

huaweite60Match-

Node

huaweivp9660_firmwareMatchv200r001c02

huaweivp9660_firmwareMatchv200r001c30

huaweivp9660_firmwareMatchv500r002c00

AND

huaweivp9660Match-

Node

huaweiviewpoint_8660_firmwareMatchv100r008c02

huaweiviewpoint_8660_firmwareMatchv100r008c03

AND

huaweiviewpoint_8660Match-

Node

huaweiespace_iad_firmwareMatchv300r002c01

AND

huaweiespace_iadMatch-

Node

huaweiespace_u1981_firmwareMatchv200r003c20

huaweiespace_u1981_firmwareMatchv200r003c30

AND

huaweiespace_u1981Match-

Node

huaweiespace_usm_firmwareMatchv100r001c01

huaweiespace_usm_firmwareMatchv300r001c00

AND

huaweiespace_usmMatch-

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171222-01-cryptography-en

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for NVD:CVE-2017-17301

cvelist1 openvas1 prion1 cve1 huawei1