← Back

CVE-2017-17314

nvd nist
Published: Apr 30, 2018Modified: Nov 21, 2024

JSON object

Loading...
3.7
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.2 / Impact: 1.4
Source: NVD

Description

Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an invalid memory access vulnerability. An unauthenticated attacker has to find a way to send malformed SCCP messages to the affected products. Due to insufficient input validation of some values in the messages, successful exploit may cause buffer error and some service abnormal.

Affected (12)

Huawei
6 products
Dp300 Firmware
Rp200 Firmware
Te30 Firmware
Te40 Firmware
Te50 Firmware
Te60 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dp300 Firmware
Version v500r002c00
Running on/withPlatform Versions
Huawei
Dp300
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rp200 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Rp200
All versions
Configuration C
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Te30 Firmware
Version v100r001c10
Te30 Firmware
Version v500r002c00
Te30 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te30
All versions
Configuration D
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Te40 Firmware
Version v500r002c00
Te40 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te40
All versions
Configuration E
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Te50 Firmware
Version v500r002c00
Te50 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te50
All versions
Configuration F
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Te60 Firmware
Version v100r001c10
Te60 Firmware
Version v500r002c00
Te60 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te60
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.