CVE-2016-6670

MEDIUM · 5.3 CVSS Gepubliceerd: 07-09-2016 CWE-200

Beschrijving

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate.

Vendors

Huawei Firmware Huawei

Affected products

S12700 S9700 Firmware S9700 S7700 Firmware S7700 S9300 Firmware S9300

References

www.huawei.com
www.securityfocus.com