CVEvulnerability

CVE-2017-17283

5.3 MEDIUM Published 2018-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125, CWE-20

Description

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00 have an out-of-bound read vulnerability. A remote attacker send specially crafted Session Initiation Protocol (SIP) messages to the affected products. Due to insufficient input validation, successful exploit will cause some services abnormal.

Affected configurations

• huawei dp300 firmware v500r002c00 • huawei rp200 firmware v500r002c00 • huawei rp200 firmware v600r006c00 • huawei te30 firmware v100r001c10 • huawei te30 firmware v500r002c00 • huawei te30 firmware v600r006c00 • huawei te40 firmware v500r002c00 • huawei te40 firmware v600r006c00 • huawei te50 firmware v500r002c00 • huawei te50 firmware v600r006c00 • huawei te60 firmware v100r001c01 • huawei te60 firmware v100r001c10 • huawei te60 firmware v500r002c00 • huawei te60 firmware v600r006c00

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-20 Improper Input Validation weakness

References