cnvd-2017-38101
Vulnerability from cnvd
Title: 多款Huawei产品弱加密算法漏洞
Description:
Huawei AR120-S等都是中国华为（Huawei）公司的路由器产品。
多款Huawei产品中存在弱加密算法漏洞，该漏洞是由于程序未能正确的解析证书中的值。远程攻击者可借助特制的证书利用该漏洞伪造RSA签名。
Severity: 中
Patch Name: 多款Huawei产品弱加密算法漏洞的补丁
Patch Description:
Huawei AR120-S等都是中国华为（Huawei）公司的路由器产品。
多款Huawei产品中存在弱加密算法漏洞，该漏洞是由于程序未能正确的解析证书中的值。远程攻击者可借助特制的证书利用该漏洞伪造RSA签名。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
目前厂商已发布升级补丁以修复漏洞，补丁获取链接： http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171222-01-cryptography-cn
Reference: http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171222-01-cryptography-cn
Impacted products
| Name | ['Huawei AR120-S V200R006C10', 'Huawei AR120-S V200R007C00', 'Huawei AR120-S V200R008C20', 'Huawei AR120-S V200R008C30', 'Huawei AR1200 V200R006C10', 'Huawei AR1200 V200R007C00', 'Huawei AR1200 V200R007C01', 'Huawei AR1200 V200R007C02', 'Huawei AR1200 V200R008C20', 'Huawei AR1200 V200R005C20', 'Huawei AR1200 V200R005C32', 'Huawei AR1200-S V200R007C00', 'Huawei AR1200-S V200R008C20', 'Huawei AR1200-S V200R006C10', 'Huawei AR1200-S V200R005C32', 'Huawei AR150 V200R006C10', 'Huawei AR150 V200R007C00', 'Huawei AR150 V200R007C01', 'Huawei AR150 V200R007C02', 'Huawei AR150 V200R008C20', 'Huawei AR160 V200R005C32', 'Huawei AR160 V200R006C10', 'Huawei AR160 V200R007C00', 'Huawei AR160 V200R007C01', 'Huawei AR160 V200R007C02', 'Huawei AR160 V200R008C20', 'Huawei AR200 V200R006C10', 'Huawei AR200 V200R007C00', 'Huawei AR200 V200R007C01', 'Huawei AR200 V200R008C20', 'Huawei AR200 V200R005C32', 'Huawei AR200-S V200R006C10', 'Huawei AR200-S V200R007C00', 'Huawei AR200-S V200R008C20', 'Huawei AR200-S V200R005C32', 'Huawei AR2200 V200R006C10', 'Huawei AR2200 V200R007C00', 'Huawei AR2200 V200R007C01', 'Huawei AR2200 V200R007C02', 'Huawei AR2200 V200R008C20', 'Huawei AR2200 V200R005C32', 'Huawei AR2200 V200R005C20', 'Huawei AR2200-S V200R006C10', 'Huawei AR2200-S V200R007C00', 'Huawei AR2200-S V200R008C20', 'Huawei AR2200-S V200R005C32', 'Huawei AR3200 V200R005C32', 'Huawei AR3200 V200R006C10', 'Huawei AR3200 V200R006C11', 'Huawei AR3200 V200R007C00', 'Huawei AR3200 V200R007C01', 'Huawei AR3200 V200R007C02', 'Huawei AR3200 V200R008C20', 'Huawei AR3200 V200R008C00', 'Huawei AR3200 V200R008C10', 'Huawei AR3200 V200R008C30', 'Huawei AR3600 V200R006C10', 'Huawei AR3600 V200R007C01', 'Huawei AR3600 V200R008C20', 'Huawei AR3600 V200R007C00', 'Huawei AR510 V200R005C32', 'Huawei AR510 V200R006C10', 'Huawei AR510 V200R007C00', 'Huawei AR510 V200R008C20', 'Huawei CloudEngine 12800 V100R003C00', 'Huawei CloudEngine 12800 V100R003C10', 'Huawei CloudEngine 12800 V100R005C00', 'Huawei CloudEngine 12800 V100R005C10', 'Huawei CloudEngine 12800 V100R006C00', 'Huawei CloudEngine 12800 V100R002C00', 'Huawei CloudEngine 12800 V200R001C00', 'Huawei CloudEngine 5800 V100R003C10', 'Huawei CloudEngine 5800 V100R005C00', 'Huawei CloudEngine 5800 V100R005C10', 'Huawei CloudEngine 5800 V100R006C00', 'Huawei CloudEngine 5800 V100R002C00', 'Huawei CloudEngine 5800 V100R003C00', 'Huawei CloudEngine 5800 V200R001C00', 'Huawei CloudEngine 6800 V100R003C10', 'Huawei CloudEngine 6800 V100R005C00', 'Huawei CloudEngine 6800 V100R005C10', 'Huawei CloudEngine 6800 V100R006C00', 'Huawei CloudEngine 6800 V100R002C00', 'Huawei CloudEngine 6800 V100R003C00', 'Huawei CloudEngine 6800 V200R001C00', 'Huawei CloudEngine 7800 V100R003C10', 'Huawei CloudEngine 7800 V100R005C00', 'Huawei CloudEngine 7800 V100R005C10', 'Huawei CloudEngine 7800 V100R006C00', 'Huawei CloudEngine 7800 V100R003C00', 'Huawei CloudEngine 7800 V200R001C00', 'Huawei DP300 V500R002C00', 'Huawei SMC2.0 V100R003C10', 'Huawei SMC2.0 V500R002C00', 'Huawei SMC2.0 V100R005C00', 'Huawei SRG1300 V200R006C10', 'Huawei SRG1300 V200R007C00', 'Huawei SRG1300 V200R007C01', 'Huawei SRG1300 V200R007C02', 'Huawei SRG1300 V200R008C20', 'Huawei SRG1300 V200R008C30', 'Huawei SRG1300 V200R005C32', 'Huawei SRG2300 V200R006C10', 'Huawei SRG2300 V200R007C00', 'Huawei SRG2300 V200R007C02', 'Huawei SRG2300 V200R008C30', 'Huawei SRG2300 V200R005C32', 'Huawei SRG3300 V200R006C10', 'Huawei SRG3300 V200R007C00', 'Huawei SRG3300 V200R008C30', 'Huawei SRG3300 V200R005C32', 'Huawei TE30 V100R001C10', 'Huawei TE60 V100R003C00', 'Huawei TE60 V500R002C00', 'Huawei VP9660 V200R001C02', 'Huawei VP9660 V200R001C30', 'Huawei VP9660 V500R002C00', 'Huawei ViewPoint 8660 V100R008C03', 'Huawei ViewPoint 8660 V100R008C02', 'Huawei eSpace IAD V300R002C01', 'Huawei eSpace U1981 V200R003C30', 'Huawei eSpace U1981 V200R003C20', 'Huawei eSpace USM V100R001C01', 'Huawei eSpace USM V300R001C00'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2017-17301"
}
},
"description": "Huawei AR120-S\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u8def\u7531\u5668\u4ea7\u54c1\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1\u4e2d\u5b58\u5728\u5f31\u52a0\u5bc6\u7b97\u6cd5\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u89e3\u6790\u8bc1\u4e66\u4e2d\u7684\u503c\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u8bc1\u4e66\u5229\u7528\u8be5\u6f0f\u6d1e\u4f2a\u9020RSA\u7b7e\u540d\u3002",
"discovererName": "Huawei",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171222-01-cryptography-cn",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2017-38101",
"openTime": "2017-12-26",
"patchDescription": "Huawei AR120-S\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u8def\u7531\u5668\u4ea7\u54c1\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1\u4e2d\u5b58\u5728\u5f31\u52a0\u5bc6\u7b97\u6cd5\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u89e3\u6790\u8bc1\u4e66\u4e2d\u7684\u503c\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u8bc1\u4e66\u5229\u7528\u8be5\u6f0f\u6d1e\u4f2a\u9020RSA\u7b7e\u540d\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "\u591a\u6b3eHuawei\u4ea7\u54c1\u5f31\u52a0\u5bc6\u7b97\u6cd5\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Huawei AR120-S V200R006C10",
"Huawei AR120-S V200R007C00",
"Huawei AR120-S V200R008C20",
"Huawei AR120-S V200R008C30",
"Huawei AR1200 V200R006C10",
"Huawei AR1200 V200R007C00",
"Huawei AR1200 V200R007C01",
"Huawei AR1200 V200R007C02",
"Huawei AR1200 V200R008C20",
"Huawei AR1200 V200R005C20",
"Huawei AR1200 V200R005C32",
"Huawei AR1200-S V200R007C00",
"Huawei AR1200-S V200R008C20",
"Huawei AR1200-S V200R006C10",
"Huawei AR1200-S V200R005C32",
"Huawei AR150 V200R006C10",
"Huawei AR150 V200R007C00",
"Huawei AR150 V200R007C01",
"Huawei AR150 V200R007C02",
"Huawei AR150 V200R008C20",
"Huawei AR160 V200R005C32",
"Huawei AR160 V200R006C10",
"Huawei AR160 V200R007C00",
"Huawei AR160 V200R007C01",
"Huawei AR160 V200R007C02",
"Huawei AR160 V200R008C20",
"Huawei AR200 V200R006C10",
"Huawei AR200 V200R007C00",
"Huawei AR200 V200R007C01",
"Huawei AR200 V200R008C20",
"Huawei AR200 V200R005C32",
"Huawei AR200-S V200R006C10",
"Huawei AR200-S V200R007C00",
"Huawei AR200-S V200R008C20",
"Huawei AR200-S V200R005C32",
"Huawei AR2200 V200R006C10",
"Huawei AR2200 V200R007C00",
"Huawei AR2200 V200R007C01",
"Huawei AR2200 V200R007C02",
"Huawei AR2200 V200R008C20",
"Huawei AR2200 V200R005C32",
"Huawei AR2200 V200R005C20",
"Huawei AR2200-S V200R006C10",
"Huawei AR2200-S V200R007C00",
"Huawei AR2200-S V200R008C20",
"Huawei AR2200-S V200R005C32",
"Huawei AR3200 V200R005C32",
"Huawei AR3200 V200R006C10",
"Huawei AR3200 V200R006C11",
"Huawei AR3200 V200R007C00",
"Huawei AR3200 V200R007C01",
"Huawei AR3200 V200R007C02",
"Huawei AR3200 V200R008C20",
"Huawei AR3200 V200R008C00",
"Huawei AR3200 V200R008C10",
"Huawei AR3200 V200R008C30",
"Huawei AR3600 V200R006C10",
"Huawei AR3600 V200R007C01",
"Huawei AR3600 V200R008C20",
"Huawei AR3600 V200R007C00",
"Huawei AR510 V200R005C32",
"Huawei AR510 V200R006C10",
"Huawei AR510 V200R007C00",
"Huawei AR510 V200R008C20",
"Huawei CloudEngine 12800 V100R003C00",
"Huawei CloudEngine 12800 V100R003C10",
"Huawei CloudEngine 12800 V100R005C00",
"Huawei CloudEngine 12800 V100R005C10",
"Huawei CloudEngine 12800 V100R006C00",
"Huawei CloudEngine 12800 V100R002C00",
"Huawei CloudEngine 12800 V200R001C00",
"Huawei CloudEngine 5800 V100R003C10",
"Huawei CloudEngine 5800 V100R005C00",
"Huawei CloudEngine 5800 V100R005C10",
"Huawei CloudEngine 5800 V100R006C00",
"Huawei CloudEngine 5800 V100R002C00",
"Huawei CloudEngine 5800 V100R003C00",
"Huawei CloudEngine 5800 V200R001C00",
"Huawei CloudEngine 6800 V100R003C10",
"Huawei CloudEngine 6800 V100R005C00",
"Huawei CloudEngine 6800 V100R005C10",
"Huawei CloudEngine 6800 V100R006C00",
"Huawei CloudEngine 6800 V100R002C00",
"Huawei CloudEngine 6800 V100R003C00",
"Huawei CloudEngine 6800 V200R001C00",
"Huawei CloudEngine 7800 V100R003C10",
"Huawei CloudEngine 7800 V100R005C00",
"Huawei CloudEngine 7800 V100R005C10",
"Huawei CloudEngine 7800 V100R006C00",
"Huawei CloudEngine 7800 V100R003C00",
"Huawei CloudEngine 7800 V200R001C00",
"Huawei DP300 V500R002C00",
"Huawei SMC2.0 V100R003C10",
"Huawei SMC2.0 V500R002C00",
"Huawei SMC2.0 V100R005C00",
"Huawei SRG1300 V200R006C10",
"Huawei SRG1300 V200R007C00",
"Huawei SRG1300 V200R007C01",
"Huawei SRG1300 V200R007C02",
"Huawei SRG1300 V200R008C20",
"Huawei SRG1300 V200R008C30",
"Huawei SRG1300 V200R005C32",
"Huawei SRG2300 V200R006C10",
"Huawei SRG2300 V200R007C00",
"Huawei SRG2300 V200R007C02",
"Huawei SRG2300 V200R008C30",
"Huawei SRG2300 V200R005C32",
"Huawei SRG3300 V200R006C10",
"Huawei SRG3300 V200R007C00",
"Huawei SRG3300 V200R008C30",
"Huawei SRG3300 V200R005C32",
"Huawei TE30 V100R001C10",
"Huawei TE60 V100R003C00",
"Huawei TE60 V500R002C00",
"Huawei VP9660 V200R001C02",
"Huawei VP9660 V200R001C30",
"Huawei VP9660 V500R002C00",
"Huawei ViewPoint 8660 V100R008C03",
"Huawei ViewPoint 8660 V100R008C02",
"Huawei eSpace IAD V300R002C01",
"Huawei eSpace U1981 V200R003C30",
"Huawei eSpace U1981 V200R003C20",
"Huawei eSpace USM V100R001C01",
"Huawei eSpace USM V300R001C00"
]
},
"referenceLink": "http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171222-01-cryptography-cn",
"serverity": "\u4e2d",
"submitTime": "2017-12-25",
"title": "\u591a\u6b3eHuawei\u4ea7\u54c1\u5f31\u52a0\u5bc6\u7b97\u6cd5\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…