CVE-2017-8174

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-326

Description

Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on the transmission links.

Affected products

Huawei Secospace Usg6300 Firmware: v100r001c30spc300
Huawei Technologies Co., Ltd. Secospace USG6600: v100r001c30spc500, v100r001c30spc600, v100r001c30spc700, v100r001c30spc800

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en

Get alerted when CVE-2017-8174 or the next vulnerability affects your stack