CVE-2017-8174 Weak cryptography in Secospace USG6300,Secospace USG6600

What is CVE-2017-8174?

CVE-2017-8174 is a high-severity vulnerability in Huawei Secospace Usg6300 Firmware, published on 22 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on the transmission links.

Weakness: CWE-326

Which versions are affected by CVE-2017-8174?

It affects 2 products.

Products include Huawei Secospace Usg6300 Firmware, Huawei Secospace Usg6600 Firmware.

How do I fix CVE-2017-8174?

No fix has been published for CVE-2017-8174 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-8174 being exploited?

There is no known exploitation of CVE-2017-8174 in the wild and no public exploit code.

Other vulnerabilities in Huawei Secospace Usg6300 Firmware

• CVE-2020-9075 Path traversal in Secospace USG6300;USG6300E Medium 6.5
• CVE-2016-8781 Denial of service in Secospace USG6300, Secospace USG6500, Secospace USG6600 Secospace USG6300 V500R001C20 and V500R001C20SPC200PWE,Secospace USG6500 V500R001C20,Secospace USG6600 V500R001C20 and V500R001C20SPC200PWE Medium 6.5
• CVE-2016-8802 Memory corruption in Secospace USG6300,Secospace USG6500,Secospace USG6600 Secospace USG6300 V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200,Secospace USG6500 V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200,Secospace USG6600 V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200, Medium 6.5

All Huawei Secospace Usg6300 Firmware vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hhpv-56p8-wvw8.