CVE-2017-17305

Published: Aug 21, 2018Modified: Nov 21, 2024

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.

Affected (4)

Products: Huawei: Usg2205bsr Firmware, Usg2220bsr Firmware, Usg5120bsr Firmware, Usg5150bsr Firmware

4 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Usg2205bsr Firmware	Version v300r001c10spc600

Running on/with	Platform Versions
Huawei Usg2205bsr	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Usg2220bsr Firmware	Version v300r001c00

Running on/with	Platform Versions
Huawei Usg2220bsr	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Usg5120bsr Firmware	Version v300r001c00

Running on/with	Platform Versions
Huawei Usg5120bsr	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Usg5150bsr Firmware	Version v300r001c00

Running on/with	Platform Versions
Huawei Usg5150bsr	All versions

Related CWEs

CWE-310

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.