CVE-2017-17301: Huawei AR120-S Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR2200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 5800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 6800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, CloudEngine 7800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, V200R001C00, DP300 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, TE30 V100R001C10, TE60 V100R003C00, V500R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, ViewPoint 8660 V100R008C02, V100R008C03, eSpace IAD V300R002C01, eSpace U1981 V200R003C20, V200R003C30, eSpace USM V100R001C01, V300R001C00 have a weak cryptography vulnerability. Due to not properly some values in the certificates, an unauthenticated remote attacker could forges a specific RSA certificate and exploits the vulnerability to pass identity authentication and logs into the target device to obtain permissions configured for the specific user name.

Affected products

  • Huawei AR120-S Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c20 only
  • Huawei AR1200-S Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c20 only
  • Huawei AR1200 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; …
  • Huawei AR150 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; version v200r008c20 only
  • Huawei AR160 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; version v200r008c20 only
  • Huawei AR200-S Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r008c20 only
  • Huawei AR200 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r008c20 only
  • Huawei AR2200-S Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c20 only
  • Huawei AR2200 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; …
  • Huawei AR3200 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r006c11 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; …
  • Huawei AR3600 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r008c20 only
  • Huawei AR510 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c20 only
  • Huawei Cloudengine 12800 Firmware: version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only; version v200r001c00 only
  • Huawei Cloudengine 5800 Firmware: version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only; version v200r001c00 only
  • Huawei Cloudengine 6800 Firmware: version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only; version v200r001c00 only
  • Huawei Cloudengine 7800 Firmware: version v100r003c00 only; version v100r003c10 only; version v100r005c00 only; version v100r005c10 only; version v100r006c00 only; version v200r001c00 only
  • Huawei DP300 Firmware: version v500r002c00 only
  • Huawei Espace Iad Firmware: version v300r002c01 only
  • Huawei Espace u1981 Firmware: version v200r003c20 only; version v200r003c30 only
  • Huawei Espace Usm Firmware: version v100r001c01 only; version v300r001c00 only
  • Huawei SMC2.0 Firmware: version v100r003c10 only; version v100r005c00 only; version v500r002c00 only
  • Huawei SRG1300 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c02 only; version v200r008c20 only
  • Huawei SRG2300 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r007c02 only; version v200r008c20 only
  • Huawei SRG3300 Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c20 only
  • Huawei TE30 Firmware: version v100r001c10 only
  • and 3 more

Published 2018-02-15. Last modified 2026-06-17.