cnvd - cnvd-2017-38099

cnvd-2017-38099

Vulnerability from cnvd

Title: 多款Huawei产品CIDAM协议信息泄露漏洞

Description:

Huawei DP300等都是中国华为（Huawei）公司的产品。DP300是一款视频会议终端。RP200是一款视频会议一体机设备。CIDAM是其中的一个信息传输协议。

多款Huawei产品中的CIDAM协议存在信息泄露漏洞，该漏洞是由于协议在实现时发送的报文信息中包含敏感信息。远程攻击者可通过截取报文利用该漏洞获取发送给目标系统的报文信息，从而获取敏感信息。

Severity: 高

Patch Name: 多款Huawei产品CIDAM协议信息泄露漏洞的补丁

Patch Description:

Huawei DP300等都是中国华为（Huawei）公司的产品。DP300是一款视频会议终端。RP200是一款视频会议一体机设备。CIDAM是其中的一个信息传输协议。

多款Huawei产品中的CIDAM协议存在信息泄露漏洞，该漏洞是由于协议在实现时发送的报文信息中包含敏感信息。远程攻击者可通过截取报文利用该漏洞获取发送给目标系统的报文信息，从而获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171220-01-cidam-cn

Reference: http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171220-01-cidam-cn

Impacted products

Name
['Huawei DP300 V500R002C00', 'Huawei TE60 V500R002C00', 'Huawei TE60 V600R006C00', 'Huawei TE30 V600R006C00', 'Huawei TE40 V600R006C00', 'Huawei TE50 V600R006C00', 'Huawei TE60 V100R001C10', 'Huawei TE30 V100R001C10SPC300', 'Huawei TE30 V100R001C10SPC500', 'Huawei TE30 V100R001C10SPC600', 'Huawei TE30 V500R002C00SPC200', 'Huawei TE30 V500R002C00SPC500', 'Huawei TE30 V500R002C00SPC600', 'Huawei TE30 V500R002C00SPC700', 'Huawei TE30 V500R002C00SPC900', 'Huawei TE30 V500R002C00SPCb00', 'Huawei TE40 V500R002C00SPC600', 'Huawei TE40 V500R002C00SPC700', 'Huawei TE40 V500R002C00SPC900', 'Huawei TE40 V500R002C00SPCb00', 'Huawei TE50 V500R002C00SPC600', 'Huawei TE50 V500R002C00SPC700', 'Huawei TE50 V500R002C00SPCb00', 'Huawei DP300 V500R002C00B010', 'Huawei DP300 V500R002C00B011', 'Huawei DP300 V500R002C00B012', 'Huawei DP300 V500R002C00B013', 'Huawei DP300 V500R002C00B014', 'Huawei DP300 V500R002C00B017', 'Huawei DP300 V500R002C00B018', 'Huawei DP300 V500R002C00SPC100', 'Huawei DP300 V500R002C00SPC200', 'Huawei DP300 V500R002C00SPC300', 'Huawei DP300 V500R002C00SPC400', 'Huawei DP300 V500R002C00SPC50', 'Huawei DP300 V500R002C00SPC600', 'Huawei DP300 V500R002C00SPC800', 'Huawei DP300 V500R002C00SPC900', 'Huawei DP300 V500R002C00SPCa00', 'Huawei TE30 V600R006C00SPC200', 'Huawei TE30 V100R001C10SPC700B010', 'Huawei TE30 V600R006C00SPC300', 'Huawei TE40 V600R006C00SPC200', 'Huawei TE40 V600R006C00SPC300', 'Huawei TE50 V600R006C00SPC200', 'Huawei TE50 V600R006C00SPC300', 'Huawei TE60 V600R006C00SPC200', 'Huawei TE60 V600R006C00SPC300', 'Huawei TE60 V600R006C00SPC100', 'Huawei TE60 V100R001C10B001', 'Huawei TE60 V100R001C10B002', 'Huawei TE60 V100R001C10B010', 'Huawei TE60 V100R001C10B011', 'Huawei TE60 V100R001C10B012', 'Huawei TE60 V100R001C10B013', 'Huawei TE60 V100R001C10B014', 'Huawei TE60 V100R001C10B016', 'Huawei TE60 V100R001C10B017', 'Huawei TE60 V100R001C10B018', 'Huawei TE60 V100R001C10B019', 'Huawei TE60 V100R001C10SPC400', 'Huawei TE60 V100R001C10SPC500', 'Huawei TE60 V100R001C10SPC600', 'Huawei TE60 V100R001C10SPC700', 'Huawei TE60 V100R001C10SPC800B011', 'Huawei TE60 V100R001C10SPC900', 'Huawei TE60 V500R002C00B010', 'Huawei TE60 V500R002C00B011', 'Huawei TE60 V500R002C00SPC100', 'Huawei TE60 V500R002C00SPC200', 'Huawei TE60 V500R002C00SPC300', 'Huawei TE60 V500R002C00SPC600', 'Huawei TE60 V500R002C00SPC700', 'Huawei TE60 V500R002C00SPC800', 'Huawei TE60 V500R002C00SPC900', 'Huawei TE60 V500R002C00SPCa00', 'Huawei TE60 V500R002C00SPCb00', 'Huawei TE60 V500R002C00SPCd00', 'Huawei TE60 V500R002C00SPCe00']

Name

['Huawei DP300 V500R002C00', 'Huawei TE60 V500R002C00', 'Huawei TE60 V600R006C00', 'Huawei TE30 V600R006C00', 'Huawei TE40 V600R006C00', 'Huawei TE50 V600R006C00', 'Huawei TE60 V100R001C10', 'Huawei TE30 V100R001C10SPC300', 'Huawei TE30 V100R001C10SPC500', 'Huawei TE30 V100R001C10SPC600', 'Huawei TE30 V500R002C00SPC200', 'Huawei TE30 V500R002C00SPC500', 'Huawei TE30 V500R002C00SPC600', 'Huawei TE30 V500R002C00SPC700', 'Huawei TE30 V500R002C00SPC900', 'Huawei TE30 V500R002C00SPCb00', 'Huawei TE40 V500R002C00SPC600', 'Huawei TE40 V500R002C00SPC700', 'Huawei TE40 V500R002C00SPC900', 'Huawei TE40 V500R002C00SPCb00', 'Huawei TE50 V500R002C00SPC600', 'Huawei TE50 V500R002C00SPC700', 'Huawei TE50 V500R002C00SPCb00', 'Huawei DP300 V500R002C00B010', 'Huawei DP300 V500R002C00B011', 'Huawei DP300 V500R002C00B012', 'Huawei DP300 V500R002C00B013', 'Huawei DP300 V500R002C00B014', 'Huawei DP300 V500R002C00B017', 'Huawei DP300 V500R002C00B018', 'Huawei DP300 V500R002C00SPC100', 'Huawei DP300 V500R002C00SPC200', 'Huawei DP300 V500R002C00SPC300', 'Huawei DP300 V500R002C00SPC400', 'Huawei DP300 V500R002C00SPC50', 'Huawei DP300 V500R002C00SPC600', 'Huawei DP300 V500R002C00SPC800', 'Huawei DP300 V500R002C00SPC900', 'Huawei DP300 V500R002C00SPCa00', 'Huawei TE30 V600R006C00SPC200', 'Huawei TE30 V100R001C10SPC700B010', 'Huawei TE30 V600R006C00SPC300', 'Huawei TE40 V600R006C00SPC200', 'Huawei TE40 V600R006C00SPC300', 'Huawei TE50 V600R006C00SPC200', 'Huawei TE50 V600R006C00SPC300', 'Huawei TE60 V600R006C00SPC200', 'Huawei TE60 V600R006C00SPC300', 'Huawei TE60 V600R006C00SPC100', 'Huawei TE60 V100R001C10B001', 'Huawei TE60 V100R001C10B002', 'Huawei TE60 V100R001C10B010', 'Huawei TE60 V100R001C10B011', 'Huawei TE60 V100R001C10B012', 'Huawei TE60 V100R001C10B013', 'Huawei TE60 V100R001C10B014', 'Huawei TE60 V100R001C10B016', 'Huawei TE60 V100R001C10B017', 'Huawei TE60 V100R001C10B018', 'Huawei TE60 V100R001C10B019', 'Huawei TE60 V100R001C10SPC400', 'Huawei TE60 V100R001C10SPC500', 'Huawei TE60 V100R001C10SPC600', 'Huawei TE60 V100R001C10SPC700', 'Huawei TE60 V100R001C10SPC800B011', 'Huawei TE60 V100R001C10SPC900', 'Huawei TE60 V500R002C00B010', 'Huawei TE60 V500R002C00B011', 'Huawei TE60 V500R002C00SPC100', 'Huawei TE60 V500R002C00SPC200', 'Huawei TE60 V500R002C00SPC300', 'Huawei TE60 V500R002C00SPC600', 'Huawei TE60 V500R002C00SPC700', 'Huawei TE60 V500R002C00SPC800', 'Huawei TE60 V500R002C00SPC900', 'Huawei TE60 V500R002C00SPCa00', 'Huawei TE60 V500R002C00SPCb00', 'Huawei TE60 V500R002C00SPCd00', 'Huawei TE60 V500R002C00SPCe00']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-17303"
    }
  },
  "description": "Huawei DP300\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002DP300\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u7ec8\u7aef\u3002RP200\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u4e00\u4f53\u673a\u8bbe\u5907\u3002CIDAM\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4fe1\u606f\u4f20\u8f93\u534f\u8bae\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1\u4e2d\u7684CIDAM\u534f\u8bae\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u534f\u8bae\u5728\u5b9e\u73b0\u65f6\u53d1\u9001\u7684\u62a5\u6587\u4fe1\u606f\u4e2d\u5305\u542b\u654f\u611f\u4fe1\u606f\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u622a\u53d6\u62a5\u6587\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u53d1\u9001\u7ed9\u76ee\u6807\u7cfb\u7edf\u7684\u62a5\u6587\u4fe1\u606f\uff0c\u4ece\u800c\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "Huawei",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171220-01-cidam-cn",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-38099",
  "openTime": "2017-12-26",
  "patchDescription": "Huawei DP300\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002DP300\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u7ec8\u7aef\u3002RP200\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u4e00\u4f53\u673a\u8bbe\u5907\u3002CIDAM\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4fe1\u606f\u4f20\u8f93\u534f\u8bae\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1\u4e2d\u7684CIDAM\u534f\u8bae\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u534f\u8bae\u5728\u5b9e\u73b0\u65f6\u53d1\u9001\u7684\u62a5\u6587\u4fe1\u606f\u4e2d\u5305\u542b\u654f\u611f\u4fe1\u606f\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u622a\u53d6\u62a5\u6587\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u53d1\u9001\u7ed9\u76ee\u6807\u7cfb\u7edf\u7684\u62a5\u6587\u4fe1\u606f\uff0c\u4ece\u800c\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eHuawei\u4ea7\u54c1CIDAM\u534f\u8bae\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Huawei DP300 V500R002C00",
      "Huawei TE60 V500R002C00",
      "Huawei TE60 V600R006C00",
      "Huawei TE30 V600R006C00",
      "Huawei TE40 V600R006C00",
      "Huawei TE50 V600R006C00",
      "Huawei TE60 V100R001C10",
      "Huawei TE30 V100R001C10SPC300",
      "Huawei TE30 V100R001C10SPC500",
      "Huawei TE30 V100R001C10SPC600",
      "Huawei TE30 V500R002C00SPC200",
      "Huawei TE30 V500R002C00SPC500",
      "Huawei TE30 V500R002C00SPC600",
      "Huawei TE30 V500R002C00SPC700",
      "Huawei TE30 V500R002C00SPC900",
      "Huawei TE30 V500R002C00SPCb00",
      "Huawei TE40 V500R002C00SPC600",
      "Huawei TE40 V500R002C00SPC700",
      "Huawei TE40 V500R002C00SPC900",
      "Huawei TE40 V500R002C00SPCb00",
      "Huawei TE50 V500R002C00SPC600",
      "Huawei TE50 V500R002C00SPC700",
      "Huawei TE50 V500R002C00SPCb00",
      "Huawei DP300 V500R002C00B010",
      "Huawei DP300 V500R002C00B011",
      "Huawei DP300 V500R002C00B012",
      "Huawei DP300 V500R002C00B013",
      "Huawei DP300 V500R002C00B014",
      "Huawei DP300 V500R002C00B017",
      "Huawei DP300 V500R002C00B018",
      "Huawei DP300 V500R002C00SPC100",
      "Huawei DP300 V500R002C00SPC200",
      "Huawei DP300 V500R002C00SPC300",
      "Huawei DP300 V500R002C00SPC400",
      "Huawei DP300 V500R002C00SPC50",
      "Huawei DP300 V500R002C00SPC600",
      "Huawei DP300 V500R002C00SPC800",
      "Huawei DP300 V500R002C00SPC900",
      "Huawei DP300 V500R002C00SPCa00",
      "Huawei TE30 V600R006C00SPC200",
      "Huawei TE30 V100R001C10SPC700B010",
      "Huawei TE30 V600R006C00SPC300",
      "Huawei TE40 V600R006C00SPC200",
      "Huawei TE40 V600R006C00SPC300",
      "Huawei TE50 V600R006C00SPC200",
      "Huawei TE50 V600R006C00SPC300",
      "Huawei TE60 V600R006C00SPC200",
      "Huawei TE60 V600R006C00SPC300",
      "Huawei TE60 V600R006C00SPC100",
      "Huawei TE60 V100R001C10B001",
      "Huawei TE60 V100R001C10B002",
      "Huawei TE60 V100R001C10B010",
      "Huawei TE60 V100R001C10B011",
      "Huawei TE60 V100R001C10B012",
      "Huawei TE60 V100R001C10B013",
      "Huawei TE60 V100R001C10B014",
      "Huawei TE60 V100R001C10B016",
      "Huawei TE60 V100R001C10B017",
      "Huawei TE60 V100R001C10B018",
      "Huawei TE60 V100R001C10B019",
      "Huawei TE60 V100R001C10SPC400",
      "Huawei TE60 V100R001C10SPC500",
      "Huawei TE60 V100R001C10SPC600",
      "Huawei TE60 V100R001C10SPC700",
      "Huawei TE60 V100R001C10SPC800B011",
      "Huawei TE60 V100R001C10SPC900",
      "Huawei TE60 V500R002C00B010",
      "Huawei TE60 V500R002C00B011",
      "Huawei TE60 V500R002C00SPC100",
      "Huawei TE60 V500R002C00SPC200",
      "Huawei TE60 V500R002C00SPC300",
      "Huawei TE60 V500R002C00SPC600",
      "Huawei TE60 V500R002C00SPC700",
      "Huawei TE60 V500R002C00SPC800",
      "Huawei TE60 V500R002C00SPC900",
      "Huawei TE60 V500R002C00SPCa00",
      "Huawei TE60 V500R002C00SPCb00",
      "Huawei TE60 V500R002C00SPCd00",
      "Huawei TE60 V500R002C00SPCe00"
    ]
  },
  "referenceLink": "http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171220-01-cidam-cn",
  "serverity": "\u9ad8",
  "submitTime": "2017-12-21",
  "title": "\u591a\u6b3eHuawei\u4ea7\u54c1CIDAM\u534f\u8bae\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2017-17303 (GCVE-0-2017-17303)

Vulnerability from cvelistv5

Published

2018-03-09 17:00

Modified

2024-08-05 20:51

Severity ?

CWE

information disclosure

Summary

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure.

References

▼	URL	Tags
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Huawei Technologies Co., Ltd.	DP300; RP200; TE30; TE40; TE50; TE60	Version: DP300 V500R002C00 Version: V500R002C00B010 Version: V500R002C00B011 Version: V500R002C00B012 Version: V500R002C00B013 Version: V500R002C00B014 Version: V500R002C00B017 Version: V500R002C00B018 Version: V500R002C00SPC100 Version: V500R002C00SPC200 Version: V500R002C00SPC300 Version: V500R002C00SPC400 Version: V500R002C00SPC500 Version: V500R002C00SPC600 Version: V500R002C00SPC800 Version: V500R002C00SPC900 Version: V500R002C00SPCa00 Version: RP200 V500R002C00SPC200 Version: V600R006C00 Version: V600R006C00SPC200 Version: V600R006C00SPC300 Version: TE30 V100R001C10SPC300 Version: V100R001C10SPC500 Version: V100R001C10SPC600 Version: V100R001C10SPC700B010 Version: V500R002C00SPC700 Version: V500R002C00SPCb00 Version: TE40 V500R002C00SPC600 Version: TE50 V500R002C00SPC600 Version: TE60 V100R001C10 Version: V100R001C10B001 Version: V100R001C10B002 Version: V100R001C10B010 Version: V100R001C10B011 Version: V100R001C10B012 Version: V100R001C10B013 Version: V100R001C10B014 Version: V100R001C10B016 Version: V100R001C10B017 Version: V100R001C10B018 Version: V100R001C10B019 Version: V100R001C10SPC400 Version: V100R001C10SPC700 Version: V100R001C10SPC800B011 Version: V100R001C10SPC900 Version: V500R002C00 Version: V500R002C00SPCd00 Version: V500R002C00SPCe00 Version: V600R006C00SPC100

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:51:30.515Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DP300; RP200; TE30; TE40; TE50; TE60",
          "vendor": "Huawei Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "DP300 V500R002C00"
            },
            {
              "status": "affected",
              "version": "V500R002C00B010"
            },
            {
              "status": "affected",
              "version": "V500R002C00B011"
            },
            {
              "status": "affected",
              "version": "V500R002C00B012"
            },
            {
              "status": "affected",
              "version": "V500R002C00B013"
            },
            {
              "status": "affected",
              "version": "V500R002C00B014"
            },
            {
              "status": "affected",
              "version": "V500R002C00B017"
            },
            {
              "status": "affected",
              "version": "V500R002C00B018"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC100"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC200"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC300"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC400"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC500"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC600"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC800"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC900"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCa00"
            },
            {
              "status": "affected",
              "version": "RP200 V500R002C00SPC200"
            },
            {
              "status": "affected",
              "version": "V600R006C00"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC200"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC300"
            },
            {
              "status": "affected",
              "version": "TE30 V100R001C10SPC300"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC500"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC600"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC700B010"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC700"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCb00"
            },
            {
              "status": "affected",
              "version": "TE40 V500R002C00SPC600"
            },
            {
              "status": "affected",
              "version": "TE50 V500R002C00SPC600"
            },
            {
              "status": "affected",
              "version": "TE60 V100R001C10"
            },
            {
              "status": "affected",
              "version": "V100R001C10B001"
            },
            {
              "status": "affected",
              "version": "V100R001C10B002"
            },
            {
              "status": "affected",
              "version": "V100R001C10B010"
            },
            {
              "status": "affected",
              "version": "V100R001C10B011"
            },
            {
              "status": "affected",
              "version": "V100R001C10B012"
            },
            {
              "status": "affected",
              "version": "V100R001C10B013"
            },
            {
              "status": "affected",
              "version": "V100R001C10B014"
            },
            {
              "status": "affected",
              "version": "V100R001C10B016"
            },
            {
              "status": "affected",
              "version": "V100R001C10B017"
            },
            {
              "status": "affected",
              "version": "V100R001C10B018"
            },
            {
              "status": "affected",
              "version": "V100R001C10B019"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC400"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC700"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC800B011"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC900"
            },
            {
              "status": "affected",
              "version": "V500R002C00"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCd00"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCe00"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC100"
            }
          ]
        }
      ],
      "datePublic": "2017-12-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-09T16:57:01",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2017-17303",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "DP300; RP200; TE30; TE40; TE50; TE60",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "DP300 V500R002C00"
                          },
                          {
                            "version_value": "V500R002C00B010"
                          },
                          {
                            "version_value": "V500R002C00B011"
                          },
                          {
                            "version_value": "V500R002C00B012"
                          },
                          {
                            "version_value": "V500R002C00B013"
                          },
                          {
                            "version_value": "V500R002C00B014"
                          },
                          {
                            "version_value": "V500R002C00B017"
                          },
                          {
                            "version_value": "V500R002C00B018"
                          },
                          {
                            "version_value": "V500R002C00SPC100"
                          },
                          {
                            "version_value": "V500R002C00SPC200"
                          },
                          {
                            "version_value": "V500R002C00SPC300"
                          },
                          {
                            "version_value": "V500R002C00SPC400"
                          },
                          {
                            "version_value": "V500R002C00SPC500"
                          },
                          {
                            "version_value": "V500R002C00SPC600"
                          },
                          {
                            "version_value": "V500R002C00SPC800"
                          },
                          {
                            "version_value": "V500R002C00SPC900"
                          },
                          {
                            "version_value": "V500R002C00SPCa00"
                          },
                          {
                            "version_value": "RP200 V500R002C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "V600R006C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00SPC300"
                          },
                          {
                            "version_value": "TE30 V100R001C10SPC300"
                          },
                          {
                            "version_value": "V100R001C10SPC500"
                          },
                          {
                            "version_value": "V100R001C10SPC600"
                          },
                          {
                            "version_value": "V100R001C10SPC700B010"
                          },
                          {
                            "version_value": "V500R002C00SPC200"
                          },
                          {
                            "version_value": "V500R002C00SPC500"
                          },
                          {
                            "version_value": "V500R002C00SPC600"
                          },
                          {
                            "version_value": "V500R002C00SPC700"
                          },
                          {
                            "version_value": "V500R002C00SPC900"
                          },
                          {
                            "version_value": "V500R002C00SPCb00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "V600R006C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00SPC300"
                          },
                          {
                            "version_value": "TE40 V500R002C00SPC600"
                          },
                          {
                            "version_value": "V500R002C00SPC700"
                          },
                          {
                            "version_value": "V500R002C00SPC900"
                          },
                          {
                            "version_value": "V500R002C00SPCb00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "V600R006C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00SPC300"
                          },
                          {
                            "version_value": "TE50 V500R002C00SPC600"
                          },
                          {
                            "version_value": "V500R002C00SPC700"
                          },
                          {
                            "version_value": "V500R002C00SPCb00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "V600R006C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00SPC300"
                          },
                          {
                            "version_value": "TE60 V100R001C10"
                          },
                          {
                            "version_value": "V100R001C10B001"
                          },
                          {
                            "version_value": "V100R001C10B002"
                          },
                          {
                            "version_value": "V100R001C10B010"
                          },
                          {
                            "version_value": "V100R001C10B011"
                          },
                          {
                            "version_value": "V100R001C10B012"
                          },
                          {
                            "version_value": "V100R001C10B013"
                          },
                          {
                            "version_value": "V100R001C10B014"
                          },
                          {
                            "version_value": "V100R001C10B016"
                          },
                          {
                            "version_value": "V100R001C10B017"
                          },
                          {
                            "version_value": "V100R001C10B018"
                          },
                          {
                            "version_value": "V100R001C10B019"
                          },
                          {
                            "version_value": "V100R001C10SPC400"
                          },
                          {
                            "version_value": "V100R001C10SPC500"
                          },
                          {
                            "version_value": "V100R001C10SPC600"
                          },
                          {
                            "version_value": "V100R001C10SPC700"
                          },
                          {
                            "version_value": "V100R001C10SPC800B011"
                          },
                          {
                            "version_value": "V100R001C10SPC900"
                          },
                          {
                            "version_value": "V500R002C00"
                          },
                          {
                            "version_value": "V500R002C00B010"
                          },
                          {
                            "version_value": "V500R002C00B011"
                          },
                          {
                            "version_value": "V500R002C00SPC100"
                          },
                          {
                            "version_value": "V500R002C00SPC200"
                          },
                          {
                            "version_value": "V500R002C00SPC300"
                          },
                          {
                            "version_value": "V500R002C00SPC600"
                          },
                          {
                            "version_value": "V500R002C00SPC700"
                          },
                          {
                            "version_value": "V500R002C00SPC800"
                          },
                          {
                            "version_value": "V500R002C00SPC900"
                          },
                          {
                            "version_value": "V500R002C00SPCa00"
                          },
                          {
                            "version_value": "V500R002C00SPCb00"
                          },
                          {
                            "version_value": "V500R002C00SPCd00"
                          },
                          {
                            "version_value": "V500R002C00SPCe00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "V600R006C00SPC100"
                          },
                          {
                            "version_value": "V600R006C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00SPC300"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Huawei Technologies Co., Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2017-17303",
    "datePublished": "2018-03-09T17:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T20:51:30.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted