CVE-2016-6670 Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remot...
MediumCVSS 5.3
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei firmware s12700 | = v200r005c00 | No fix listed |
| Huawei s9700 firmware | = v200r003c00 | No fix listed |
| Huawei s9700 firmware | = v200r005c00 | No fix listed |
| Huawei s7700 firmware | = v200r003c00 | No fix listed |
| Huawei s7700 firmware | = v200r005c00 | No fix listed |
| Huawei s9300 firmware | = v200r003c00 | No fix listed |
| Huawei s9300 firmware | = v200r005c00 | No fix listed |
References
- www.huawei.com mitigation vendor-advisory
- 92438 third-party-advisory vdb-entry