← Back

CVE-2017-15342

nvd nist
Published: Feb 15, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability. The software does not correctly calculate the rest size in a buffer when handling SSL connections. A remote unauthenticated attacker could send a lot of crafted SSL messages to the device, successful exploit could cause no space in the buffer and then denial of service.

Affected (4)

Huawei
4 products
Dp300 Firmware
Te60 Firmware
Tp3106 Firmware
Espace U1981 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dp300 Firmware
Version v500r002c00
Running on/withPlatform Versions
Huawei
Dp300
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Te60 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te60
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tp3106 Firmware
Version v100r002c00
Running on/withPlatform Versions
Huawei
Tp3106
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Espace U1981 Firmware
Version v200r003c30spc100
Running on/withPlatform Versions
Huawei
Espace U1981
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.