PT-2017-18180 · Huawei · Huawei Usg6600+2

Publicado 2017-08-02 · Atualizado 2017-12-12 · CVE-2017-8174

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei USG6300 version V100R001C30SPC300 Huawei USG6600 versions V100R001C30SPC500 through V100R001C30SPC800

Description The issue is related to a weak algorithm vulnerability. This vulnerability can be exploited by attackers to crack the cipher text, potentially leading to confidential information leaks on transmission links.

Recommendations For Huawei USG6300 version V100R001C30SPC300, update the software to a version that does not contain the weak algorithm vulnerability. For Huawei USG6600 versions V100R001C30SPC500 through V100R001C30SPC800, update the software to a version that does not contain the weak algorithm vulnerability.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2017-8174

Produtos afetados

Huawei S6300

Huawei Usg6600

Huawei Vrp

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-8174 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8174 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en · Aviso do Fabricante