NetSight
IP …
medium5.3

CVE-2016-6670

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed cert…

Impact

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate.

Affected products

VendorProductAffected versions
Huawei FirmwareS12700
Version v200r005c00
HuaweiS9700 Firmware
Versions v200r003c00, v200r005c00
HuaweiS7700 Firmware
Versions v200r003c00, v200r005c00
HuaweiS9300 Firmware
Versions v200r003c00, v200r005c00

Weakness classification

CWE-200

References