Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-17303

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC20

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei Technologies Co., Ltd. DP300; RP200; TE30; TE40; TE50; TE60

  • DP300 V500R002C00affected
  • V500R002C00B010affected
  • V500R002C00B011affected
  • V500R002C00B012affected
  • V500R002C00B013affected
  • V500R002C00B014affected
  • V500R002C00B017affected
  • V500R002C00B018affected
  • V500R002C00SPC100affected
  • V500R002C00SPC200affected
  • V500R002C00SPC300affected
  • V500R002C00SPC400affected
  • V500R002C00SPC500affected
  • V500R002C00SPC600affected
  • V500R002C00SPC800affected
  • V500R002C00SPC900affected
  • V500R002C00SPCa00affected
  • RP200 V500R002C00SPC200affected
  • V600R006C00affected
  • V600R006C00SPC200affected
  • V600R006C00SPC300affected
  • TE30 V100R001C10SPC300affected
  • V100R001C10SPC500affected
  • V100R001C10SPC600affected
  • V100R001C10SPC700B010affected
  • V500R002C00SPC700affected
  • V500R002C00SPCb00affected
  • TE40 V500R002C00SPC600affected
  • TE50 V500R002C00SPC600affected
  • TE60 V100R001C10affected
  • V100R001C10B001affected
  • V100R001C10B002affected
  • V100R001C10B010affected
  • V100R001C10B011affected
  • V100R001C10B012affected
  • V100R001C10B013affected
  • V100R001C10B014affected
  • V100R001C10B016affected
  • V100R001C10B017affected
  • V100R001C10B018affected
  • V100R001C10B019affected
  • V100R001C10SPC400affected
  • V100R001C10SPC700affected
  • V100R001C10SPC800B011affected
  • V100R001C10SPC900affected
  • V500R002C00affected
  • V500R002C00SPCd00affected
  • V500R002C00SPCe00affected
  • V600R006C00SPC100affected

References