CVE-2016-6670

Summary: CVE-2016-6670 affects Huawei S7700, S9300, S9700, and S12700 devices running software before V200R008C00SPC500. The root cause is the use of random numbers with insufficient entropy to generate self-signed certificates, enabling remote attackers to more easily recover private keys by exp...

Security Advisory - A Security Vulnerability of Using Insecure Random Numbers to Generate Self-signed Certificates in Huawei Products

Some Huawei products automatically generate self-signed certificates upon the first use. The random numbers used to generate these certificates are not random enough. Different devices' certificates may use the same random number consequently, which contains the risk of an attacker compromising t...