CVE-2017-15350
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10,SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3206 V100R002C00, V100R002C10,USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50 haa a buffer overflow vulnerability. An unauthenticated, remote attacker could exploit this vulnerability by sending specially crafted message to the affected products. The vulnerability is due to insufficient input validation of the message, which could result in a buffer overflow. Successful exploit may cause some services abnormal.
Affected (69)
Products: Huawei: Dp300 Firmware, Ips Module Firmware, Ngfw Module Firmware, Nip6300 Firmware, Nip6600 Firmware, Nip6800 Firmware, Svn5800 C Firmware, Rp200 Firmware, Svn5600 Firmware, Svn5800 Firmware, Secospace Usg6300 Firmware, Secospace Usg6500 Firmware, Secospace Usg6600 Firmware, Te30 Firmware, Te40 Firmware, Te50 Firmware, Te60 Firmware, Tp3206 Firmware, Usg9500 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r002c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Dp300 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ips Module | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ngfw Module | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r001c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Nip6300 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r001c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Nip6600 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r001c50 |
| Running on/with | Platform Versions |
|---|---|
Huawei Nip6800 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Svn5800 C | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r002c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Rp200 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Svn5600 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Svn5800 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Secospace Usg6300 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Secospace Usg6500 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Secospace Usg6600 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c02 |
| Running on/with | Platform Versions |
|---|---|
Huawei Te30 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r002c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Te40 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r002c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Te50 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r001c01 |
| Running on/with | Platform Versions |
|---|---|
Huawei Te60 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version v100r002c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Tp3206 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version v500r001c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Usg9500 | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.