CVE-2017-17303

Summary

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure.

Affected Software

VendorProductVersion RangeStatus
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60DP300 V500R002C00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B010affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B011affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B012affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B013affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B014affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B017affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00B018affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC100affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC200affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC300affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC400affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC500affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC600affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC800affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC900affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPCa00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60RP200 V500R002C00SPC200affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V600R006C00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V600R006C00SPC200affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V600R006C00SPC300affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60TE30 V100R001C10SPC300affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC500affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC600affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC700B010affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPC700affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPCb00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60TE40 V500R002C00SPC600affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60TE50 V500R002C00SPC600affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60TE60 V100R001C10affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B001affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B002affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B010affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B011affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B012affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B013affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B014affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B016affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B017affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B018affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10B019affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC400affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC700affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC800B011affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V100R001C10SPC900affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPCd00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V500R002C00SPCe00affected
Huawei Technologies Co., Ltd.DP300; RP200; TE30; TE40; TE50; TE60V600R006C00SPC100affected

Weaknesses

  • information disclosure

ADP Enrichment

CVE Program Container

Additional References

References