CVE-2017-8213

MEDIUM

Huawei SMC2.0 Multiple Versions - DoS via TLS/DTLS Certificate Validation

Title source: llm

Description

Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en

Scores

CVSS v3 5.3

EPSS 0.0017

EPSS Percentile 37.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-295

Status published

Products (10)

huawei/smc2.0_firmware v100r003c10

huawei/smc2.0_firmware v100r005c00spc100

huawei/smc2.0_firmware v100r005c00spc101b001t

huawei/smc2.0_firmware v100r005c00spc102

huawei/smc2.0_firmware v100r005c00spc103

huawei/smc2.0_firmware v100r005c00spc200

huawei/smc2.0_firmware v100r005c00spc201t

huawei/smc2.0_firmware v500r002c00

huawei/smc2.0_firmware v600r006c00

Huawei Technologies Co., Ltd./SMC2.0 V100R003C10,V100R005C00SPC100,V100R005C00SPC101B001T,V100R005C00SPC102,V100R005C00SPC103,V100R005C00

Published Nov 22, 2017

Tracked Since Feb 18, 2026