CVE-2017-8174

Published: Nov 22, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on the transmission links.

Affected (5)

Products: Huawei: Secospace Usg6300 Firmware, Secospace Usg6600 Firmware

Huawei

2 products

Secospace Usg6300 Firmware

Secospace Usg6600 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6300 Firmware	Version v100r001c30spc300

Running on/with	Platform Versions
Huawei Secospace Usg6300	All versions

Configuration B

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6600 Firmware	Version v100r001c30spc500
Huawei Secospace Usg6600 Firmware	Version v100r001c30spc600
Huawei Secospace Usg6600 Firmware	Version v100r001c30spc700
Huawei Secospace Usg6600 Firmware	Version v100r001c30spc800

Running on/with	Platform Versions
Huawei Secospace Usg6600	All versions

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.