CVE-2017-17305
Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.
- Score
- CVSS 3.0 5.9 Medium
- Status
- Modified - psirt@huawei.com
- Published
- 2018-08-21
- Last modified
- 2024-08-05
- Weaknesses
- CWE-310
Affected products
- Usg2205bsr Firmware (Huawei)
- Usg2220bsr Firmware (Huawei)
- Usg5120bsr Firmware (Huawei)
- Usg5150bsr Firmware (Huawei)
- Usg2205bsr Usg2220bsr Usg5120bsr Usg5150bsr (Huawei Technologies Co. Ltd.)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en
