CVE-2017-8213: Input Validation
First published: Wed Nov 22 2017(Updated: )
Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Smc2.0 Firmware | =v100r003c10 | |
| Huawei Smc2.0 Firmware | =v100r005c00spc100 | |
| Huawei Smc2.0 Firmware | =v100r005c00spc101b001t | |
| Huawei Smc2.0 Firmware | =v100r005c00spc102 | |
| Huawei Smc2.0 Firmware | =v100r005c00spc103 | |
| Huawei Smc2.0 Firmware | =v100r005c00spc200 | |
| Huawei Smc2.0 Firmware | =v100r005c00spc201t | |
| Huawei Smc2.0 Firmware | =v500r002c00 | |
| Huawei Smc2.0 Firmware | =v600r006c00 | |
| Huawei SMC2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2017-8213?
CVE-2017-8213 is a vulnerability in Huawei SMC2.0 with certain software versions that allows for input validation bypass during TLS and DTLS handshake with certificate.
Which versions of Huawei SMC2.0 are affected by CVE-2017-8213?
The following versions are affected: V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00.
What is the severity of CVE-2017-8213?
The severity of CVE-2017-8213 is medium with a CVSS score of 5.3.
How can the CVE-2017-8213 vulnerability be fixed?
There is no specific fix available, but it is recommended to update to the latest version of Huawei SMC2.0 firmware to mitigate the vulnerability.
Where can I find more information about CVE-2017-8213?
You can find more information about CVE-2017-8213 on the Huawei PSIRT website at: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- vendor/huawei
- canonical/huawei smc2.0 firmware
- version/huawei smc2.0 firmware/v100r003c10
- version/huawei smc2.0 firmware/v100r005c00spc100
- version/huawei smc2.0 firmware/v100r005c00spc101b001t
- version/huawei smc2.0 firmware/v100r005c00spc102
- version/huawei smc2.0 firmware/v100r005c00spc103
- version/huawei smc2.0 firmware/v100r005c00spc200
- version/huawei smc2.0 firmware/v100r005c00spc201t
- version/huawei smc2.0 firmware/v500r002c00
- version/huawei smc2.0 firmware/v600r006c00
- canonical/huawei smc2.0