CVE-2017-8213 describes an input validation vulnerability in Huawei SMC2.0 software versions V100R003C10 through V600R006C00. The flaw stems from insufficient validation of received PKI certificates during TLS and DTLS handshakes. This vulnerability carries a CVSSv3 score of 5.3 (Medium), indicating it can be exploited remotely without authentication (AV:N/AC:L/PR:N/UI:N) to cause a denial of service by crashing the TLS module (A:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v100r003c10CPE matchmatch criteria | cpe:2.3:o:huawei:smc2.0_firmware:v100r003c10:*:*:*:*:*:*:* | ||
v100r005c00spc100CPE matchmatch criteria | cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc100:*:*:*:*:*:*:* | ||
v100r005c00spc101b001tCPE matchmatch criteria | cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc101b001t:*:*:*:*:*:*:* | ||
v100r005c00spc102CPE matchmatch criteria | cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc102:*:*:*:*:*:*:* | ||
v100r005c00spc103CPE matchmatch criteria | cpe:2.3:o:huawei:smc2.0_firmware:v100r005c00spc103:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.