Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Huawei SMC2.0 firmware can crash TLS module

CVE-2017-8213 · published 8 years ago
Summary

The Huawei SMC2.0 firmware versions listed can fail to properly check digital certificates during secure connections. An attacker who sends a crafted certificate could cause the TLS/DTLS component to stop working, interrupting secure communications. Apply the vendor’s security update or patch to fix the certificate validation logic.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
huawei smc2.0_firmware v100r003c10
v100r005c00spc100
v100r005c00spc101b001t
v100r005c00spc102
v100r005c00spc103
v100r005c00spc200
v100r005c00spc201t
v500r002c00
v600r006c00
cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:*
Original advisory text
Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an i...
Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
Timeline
Published22 Nov 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-8213 · NVD
Track software like this
Free during beta