CVEvulnerability

CVE-2017-17200

5.9 MEDIUM Published 2018-03-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125

Description

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable.

Affected configurations

• huawei dp300 firmware v500r002c00 • huawei rp200 firmware v500r002c00 • huawei rp200 firmware v600r006c00 • huawei te30 firmware v100r001c10 • huawei te30 firmware v500r002c00 • huawei te30 firmware v600r006c00 • huawei te40 firmware v500r002c00 • huawei te40 firmware v600r006c00 • huawei te50 firmware v500r002c00 • huawei te50 firmware v600r006c00 • huawei te60 firmware v100r001c10 • huawei te60 firmware v500r002c00 • huawei te60 firmware v600r006c00

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References