CVE-2017-17303

CVE-2017-17303 describes an information disclosure vulnerability in multiple Huawei DP300, RP200, TE30, TE40, TE50, and TE60 products. These devices, when using the CIDAM protocol, expose sensitive information within messages. An authenticated remote attacker could exploit this to track and intercept messages, leading to the disclosure of sensitive data. The vulnerability has a CVSS v3.0 score of 4.9 (Medium), indicating a network attack vector with low attack complexity, requiring high privileges, and resulting in high confidentiality impact without affecting integrity or availability. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability.