CVE-2017-17303

State: Published
Severity: Not scored
Published: Mar 9, 2018
Updated: Aug 5, 2024
Reserved: Dec 4, 2017

Description

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
DP300; RP200; TE30; TE40; TE50; TE60Huawei Technologies Co., Ltd.	DP300 V500R002C00Affected V500R002C00B010Affected V500R002C00B011Affected V500R002C00B012Affected V500R002C00B013Affected V500R002C00B014Affected V500R002C00B017Affected V500R002C00B018Affected V500R002C00SPC100Affected V500R002C00SPC200Affected V500R002C00SPC300Affected V500R002C00SPC400Affected V500R002C00SPC500Affected V500R002C00SPC600Affected V500R002C00SPC800Affected V500R002C00SPC900Affected V500R002C00SPCa00Affected RP200 V500R002C00SPC200Affected V600R006C00Affected V600R006C00SPC200Affected V600R006C00SPC300Affected TE30 V100R001C10SPC300Affected V100R001C10SPC500Affected V100R001C10SPC600Affected V100R001C10SPC700B010Affected and 24 more versions

Product

Versions

DP300; RP200; TE30; TE40; TE50; TE60Huawei Technologies Co., Ltd.

DP300 V500R002C00Affected
V500R002C00B010Affected
V500R002C00B011Affected
V500R002C00B012Affected
V500R002C00B013Affected
V500R002C00B014Affected
V500R002C00B017Affected
V500R002C00B018Affected
V500R002C00SPC100Affected
V500R002C00SPC200Affected
V500R002C00SPC300Affected
V500R002C00SPC400Affected
V500R002C00SPC500Affected
V500R002C00SPC600Affected
V500R002C00SPC800Affected
V500R002C00SPC900Affected
V500R002C00SPCa00Affected
RP200 V500R002C00SPC200Affected
V600R006C00Affected
V600R006C00SPC200Affected
V600R006C00SPC300Affected
TE30 V100R001C10SPC300Affected
V100R001C10SPC500Affected
V100R001C10SPC600Affected
V100R001C10SPC700B010Affected
and 24 more versions

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-cidam-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.