CVEvulnerability

CVE-2017-17165

7.5 HIGH Published 2018-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-125

Description

IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S2700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5300 V200R003C00, V200R003C00SPC300T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R005C05, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5700 V200R003C00, V200R003C00SPC316T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S600-E V200R008C00, V200R009C00, S6300 V200R003C00, V200R005C00, V200R007C00, V200R008C00, V200R009C00, S6700 V200R003C00, V200R005C00, V200R005C01, V200R005C02, V200R007C00, V200R008C00, V200R009C00 has an out-of-bounds read vulnerability. An unauthenticated attacker may send crafted malformed IPv6 packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause device to reset.

Affected configurations

• huawei quidway s2700 firmware v200r003c00spc300 • huawei quidway s5300 firmware v200r003c00spc300 • huawei quidway s5700 firmware v200r003c00spc300 • huawei s2300 firmware v200r003c00 • huawei s2300 firmware v200r003c00spc300t • huawei s2300 firmware v200r005c00 • huawei s2300 firmware v200r006c00 • huawei s2300 firmware v200r007c00 • huawei s2300 firmware v200r008c00 • huawei s2300 firmware v200r009c00 • huawei s2700 firmware v200r005c00 • huawei s2700 firmware v200r006c00 • huawei s2700 firmware v200r007c00 • huawei s2700 firmware v200r008c00 • huawei s2700 firmware v200r009c00 • huawei s5300 firmware v200r003c00 • huawei s5300 firmware v200r003c00spc300t • huawei s5300 firmware v200r003c00spc600 • huawei s5300 firmware v200r003c02 • huawei s5300 firmware v200r005c00 • huawei s5300 firmware v200r005c01 • huawei s5300 firmware v200r005c02 • huawei s5300 firmware v200r005c03 • huawei s5300 firmware v200r005c05 • huawei s5300 firmware v200r006c00 • huawei s5300 firmware v200r007c00 • huawei s5300 firmware v200r008c00 • huawei s5300 firmware v200r009c00 • huawei s5700 firmware v200r003c00 • huawei s5700 firmware v200r003c00spc316t • huawei s5700 firmware v200r003c00spc600 • huawei s5700 firmware v200r003c02 • huawei s5700 firmware v200r005c00 • huawei s5700 firmware v200r005c01 • huawei s5700 firmware v200r005c02 • huawei s5700 firmware v200r005c03 • huawei s5700 firmware v200r006c00 • huawei s5700 firmware v200r007c00 • huawei s5700 firmware v200r008c00 • huawei s5700 firmware v200r009c00 • huawei s600-e firmware v200r008c00 • huawei s600-e firmware v200r009c00 • huawei s6300 firmware v200r003c00 • huawei s6300 firmware v200r005c00 • huawei s6300 firmware v200r007c00 • huawei s6300 firmware v200r008c00 • huawei s6300 firmware v200r009c00 • huawei s6700 firmware v200r003c00 • huawei s6700 firmware v200r005c00 • huawei s6700 firmware v200r005c01 • huawei s6700 firmware v200r005c02 • huawei s6700 firmware v200r007c00 • huawei s6700 firmware v200r008c00 • huawei s6700 firmware v200r009c00

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References