CVE-2017-17286
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bound write vulnerability. Due to insufficient input validation, a remote, unauthenticated attacker may craft encryption key to the affected products. Successful exploit may cause buffer overflow, services abnormal.
Affected (98)
Products: Huawei: Ar120 S Firmware, Ar1200 Firmware, Ar1200 S Firmware, Ar150 Firmware, Ar150 S Firmware, Ar160 Firmware, Ar200 Firmware, Ar200 S Firmware, Ar2200 Firmware, Ar2200 S Firmware, Ar3200 Firmware, Ar3600 Firmware, Ar510 Firmware, Netengine16ex Firmware, Srg1300 Firmware, Srg2300 Firmware, Srg3300 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar120 S | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar1200 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar1200 S | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar150 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar150 S | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar160 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar200 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar200 S | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r006c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar2200 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar2200 S | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar3200 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r006c10 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar3600 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Ar510 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Netengine16ex | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Srg1300 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Srg2300 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version v200r005c32 |
| Running on/with | Platform Versions |
|---|---|
Huawei Srg3300 | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.