CVE-2018-7920

Published: Apr 19, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.

Affected (5)

Products: Huawei: Ar1200 Firmware, Ar160 Firmware, Ar200 Firmware, Ar2200 Firmware, Ar3200 Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar1200 Firmware	Version v200r006c10spc300

Running on/with	Platform Versions
Huawei Ar1200	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar160 Firmware	Version v200r006c10spc300

Running on/with	Platform Versions
Huawei Ar160	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar200 Firmware	Version v200r006c10spc300

Running on/with	Platform Versions
Huawei Ar200	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar2200 Firmware	Version v200r006c10spc300

Running on/with	Platform Versions
Huawei Ar2200	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar3200 Firmware	Version v200r006c10spc300

Running on/with	Platform Versions
Huawei Ar3200	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-ar-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-ar-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.