CVE-2017-17167: huawei technologies co., ltd. dp300; tp3206; viewpoint 9030
Vulnerability summary
CVE-2017-17167 is a medium (CVSS 5.9) vulnerability in huawei technologies co., ltd. dp300; tp3206; viewpoint 9030. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 49.7% of scored vulnerabilities.
Timeline
- 09-03-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Huawei DP300 V500R002C00; TP3206 V100R002C00; ViewPoint 9030 V100R011C02; V100R011C03 have a use of a broken or risky cryptographic algorithm vulnerability. The software uses risky cryptographic algorithm in SSL. This is dangerous because a remote unauthenticated attacker could use well-known techniques to break the algorithm. Successful exploit could result in the exposure of sensitive information.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.64%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
0.00 pp
From 0.64% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei3 products
- dp300_firmwarev500r002c00
- tp3206_firmwarev100r002c00
- viewpoint_9030_firmwarev100r011c02 | v100r011c03
Huawei technologies co., ltd.1 product
- dp300; tp3206; viewpoint 9030DP300 V500R002C00 | TP3206 V100R002C00 | ViewPoint 9030 V100R011C02 | V100R011C03
2 vendors · 4 products
References
2 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ssl-enX Refsource CONFIRMVendor Advisory