Riskcovery

CVE-2017-17305

State
Published
Severity
Not scored
Published
Aug 21, 2018
Updated
Aug 5, 2024
Reserved
Dec 4, 2017

Read the record on cve.org

Description

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSRHuawei Technologies Co., Ltd.
  • USG2205BSR V300R001C10SPC600Affected
  • USG2220BSR V300R001C00Affected
  • USG5120BSR V300R001C00Affected
  • USG5150BSR V300R001C00Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.