← Back

CVE-2017-15344

nvd nist
Published: Feb 15, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could cause system reboot.

Affected (9)

Huawei
3 products
Ar120 S Firmware
Ar1200 Firmware
Ar3200 Firmware
Configuration A
9 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Ar120 S Firmware
Version v200r006c10
Ar120 S Firmware
Version v200r007c00
Ar120 S Firmware
Version v200r008c20
Ar120 S Firmware
Version v200r008c30
Huawei
Ar1200 Firmware
Version v200r007c01
Ar1200 Firmware
Version v200r007c02
Huawei
Ar3200 Firmware
Version v200r006c11
Ar3200 Firmware
Version v200r008c00
Ar3200 Firmware
Version v200r008c10
Running on/withPlatform Versions
Huawei
Ar3200
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.