NetSight
IP …
medium5.9

CVE-2017-17305

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle…

Impact

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.

Affected products

VendorProductAffected versions
HuaweiUsg2205bsr Firmware
Version v300r001c10spc600
HuaweiUsg2220bsr Firmware
Version v300r001c00
HuaweiUsg5120bsr Firmware
Version v300r001c00
HuaweiUsg5150bsr Firmware
Version v300r001c00

Weakness classification

CWE-310

References