CVE-2017-17318

Published: Apr 30, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability.

Affected (2)

Products: Huawei: E5771h 937 Firmware

1 product

E5771h 937 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei E5771h 937 Firmware	Before v200r001b329d05sp00c1308

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei E5771h 937 Firmware	Before v200r001b328d62sp00c1133

Running on/with	Platform Versions
Huawei E5771h 937	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.