{"id":"CVE-2017-8213","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-8213","generatedAt":"2026-10-28T19:45:42.653Z","title":"Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS…","description":"Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module.","published":"2017-11-22T19:29:05.000Z","lastModified":"2026-06-17T01:25:59.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},"cwe":["CWE-295"],"affected":["huawei/smc2.0 firmware"],"epss":{"score":0.00614,"percentile":0.49167,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.61%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en","tags":["Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170705-01-tls-en","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-8213","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}