PT-2017-18180 · Huawei · Huawei Usg6600+2

Published 2017-08-02 · Updated 2017-12-12 · CVE-2017-8174

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei USG6300 version V100R001C30SPC300 Huawei USG6600 versions V100R001C30SPC500 through V100R001C30SPC800

Description The issue is related to a weak algorithm vulnerability. This vulnerability can be exploited by attackers to crack the cipher text, potentially leading to confidential information leaks on transmission links.

Recommendations For Huawei USG6300 version V100R001C30SPC300, update the software to a version that does not contain the weak algorithm vulnerability. For Huawei USG6600 versions V100R001C30SPC500 through V100R001C30SPC800, update the software to a version that does not contain the weak algorithm vulnerability.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2017-8174

Affected Products

Huawei S6300

Huawei Usg6600

Huawei Vrp

References · 3

• https://osv.dev/vulnerability/CVE-2017-8174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8174 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en · Vendor Advisory