Skip to content
OpenAdvisories
Unscored CVE-2017-17305 EUVD-2017-8471GHSA-rv93-54r4-pppm

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a B…

Published Aug 21, 2018 · Updated Aug 5, 2024 · Assigned by huawei

Vendor: Huawei Product: USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR Category: Network devices

Description

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.

Affected products

VendorProductAffectedFixed
Huawei Technologies USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR USG2205BSR V300R001C10SPC600, USG2220BSR V300R001C00, USG5120BSR V300R001C00, USG5150BSR V300R001C00 —

References