Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2016-6670

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate.

  • Published: Sep 7, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-6670
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
huawei_firmware / s12700 200r005c00 200r005c00.x
huawei / s9700_firmware 200r003c00 200r003c00.x
huawei / s9700_firmware 200r005c00 200r005c00.x
huawei / s7700_firmware 200r003c00 200r003c00.x
huawei / s7700_firmware 200r005c00 200r005c00.x
huawei / s9300_firmware 200r003c00 200r003c00.x
huawei / s9300_firmware 200r005c00 200r005c00.x