Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-17303


Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE30 V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; TE60 V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300 use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could allow the attacker to get the information and cause the sensitive information disclosure.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 4.9, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction . The vulnerability impacts confidentiality (data exposure), for affected systems. Impacting 12 products from huawei, from huawei, from huawei and 9 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2018-03-09T17:29:01.750

Last Modified

2024-11-21T03:17:47.600

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 4.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei dp300_firmware v500r002c00 Yes
Operating System huawei dp300_firmware v500r002c00b010 Yes
Operating System huawei dp300_firmware v500r002c00b011 Yes
Operating System huawei dp300_firmware v500r002c00b012 Yes
Operating System huawei dp300_firmware v500r002c00b013 Yes
Operating System huawei dp300_firmware v500r002c00b014 Yes
Operating System huawei dp300_firmware v500r002c00b017 Yes
Operating System huawei dp300_firmware v500r002c00b018 Yes
Operating System huawei dp300_firmware v500r002c00spc100 Yes
Operating System huawei dp300_firmware v500r002c00spc200 Yes
Operating System huawei dp300_firmware v500r002c00spc300 Yes
Operating System huawei dp300_firmware v500r002c00spc400 Yes
Operating System huawei dp300_firmware v500r002c00spc500 Yes
Operating System huawei dp300_firmware v500r002c00spc600 Yes
Operating System huawei dp300_firmware v500r002c00spc800 Yes
Operating System huawei dp300_firmware v500r002c00spc900 Yes
Operating System huawei dp300_firmware v500r002c00spca00 Yes
Hardware huawei dp300 - No
Operating System huawei rp200_firmware v500r002c00spc200 Yes
Operating System huawei rp200_firmware v600r006c00 Yes
Operating System huawei rp200_firmware v600r006c00spc200 Yes
Operating System huawei rp200_firmware v600r006c00spc300 Yes
Hardware huawei rp200 - No
Operating System huawei te30_firmware v100r001c10spc300 Yes
Operating System huawei te30_firmware v100r001c10spc500 Yes
Operating System huawei te30_firmware v100r001c10spc600 Yes
Operating System huawei te30_firmware v100r001c10spc700b010 Yes
Operating System huawei te30_firmware v500r002c00spc200 Yes
Operating System huawei te30_firmware v500r002c00spc500 Yes
Operating System huawei te30_firmware v500r002c00spc600 Yes
Operating System huawei te30_firmware v500r002c00spc700 Yes
Operating System huawei te30_firmware v500r002c00spc900 Yes
Operating System huawei te30_firmware v500r002c00spcb00 Yes
Operating System huawei te30_firmware v600r006c00 Yes
Operating System huawei te30_firmware v600r006c00spc200 Yes
Operating System huawei te30_firmware v600r006c00spc300 Yes
Hardware huawei te30 - No
Operating System huawei te40_firmware v500r002c00spc600 Yes
Operating System huawei te40_firmware v500r002c00spc700 Yes
Operating System huawei te40_firmware v500r002c00spc900 Yes
Operating System huawei te40_firmware v500r002c00spcb00 Yes
Operating System huawei te40_firmware v600r006c00 Yes
Operating System huawei te40_firmware v600r006c00spc200 Yes
Operating System huawei te40_firmware v600r006c00spc300 Yes
Hardware huawei te40 - No
Operating System huawei te50_firmware v500r002c00spc600 Yes
Operating System huawei te50_firmware v500r002c00spc700 Yes
Operating System huawei te50_firmware v500r002c00spcb00 Yes
Operating System huawei te50_firmware v600r006c00 Yes
Operating System huawei te50_firmware v600r006c00spc200 Yes
Operating System huawei te50_firmware v600r006c00spc300 Yes
Hardware huawei te50 - No
Operating System huawei te60_firmware v100r001c10 Yes
Operating System huawei te60_firmware v100r001c10b001 Yes
Operating System huawei te60_firmware v100r001c10b002 Yes
Operating System huawei te60_firmware v100r001c10b010 Yes
Operating System huawei te60_firmware v100r001c10b011 Yes
Operating System huawei te60_firmware v100r001c10b012 Yes
Operating System huawei te60_firmware v100r001c10b013 Yes
Operating System huawei te60_firmware v100r001c10b014 Yes
Operating System huawei te60_firmware v100r001c10b016 Yes
Operating System huawei te60_firmware v100r001c10b017 Yes
Operating System huawei te60_firmware v100r001c10b018 Yes
Operating System huawei te60_firmware v100r001c10b019 Yes
Operating System huawei te60_firmware v100r001c10spc400 Yes
Operating System huawei te60_firmware v100r001c10spc500 Yes
Operating System huawei te60_firmware v100r001c10spc600 Yes
Operating System huawei te60_firmware v100r001c10spc700 Yes
Operating System huawei te60_firmware v100r001c10spc800b011 Yes
Operating System huawei te60_firmware v100r001c10spc900 Yes
Operating System huawei te60_firmware v500r002c00 Yes
Operating System huawei te60_firmware v500r002c00b010 Yes
Operating System huawei te60_firmware v500r002c00b011 Yes
Operating System huawei te60_firmware v500r002c00spc100 Yes
Operating System huawei te60_firmware v500r002c00spc200 Yes
Operating System huawei te60_firmware v500r002c00spc300 Yes
Operating System huawei te60_firmware v500r002c00spc600 Yes
Operating System huawei te60_firmware v500r002c00spc700 Yes
Operating System huawei te60_firmware v500r002c00spc800 Yes
Operating System huawei te60_firmware v500r002c00spc900 Yes
Operating System huawei te60_firmware v500r002c00spca00 Yes
Operating System huawei te60_firmware v500r002c00spcb00 Yes
Operating System huawei te60_firmware v500r002c00spcd00 Yes
Operating System huawei te60_firmware v500r002c00spce00 Yes
Operating System huawei te60_firmware v600r006c00 Yes
Operating System huawei te60_firmware v600r006c00spc100 Yes
Operating System huawei te60_firmware v600r006c00spc200 Yes
Operating System huawei te60_firmware v600r006c00spc300 Yes
Hardware huawei te60 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For huawei's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.