CVEvulnerability

CVE-2017-8147

7.5 HIGH Published 2017-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack.

Affected configurations

• huawei ac6005 firmware v200r006c10spc200 • huawei ac6605 firmware v200r006c10spc200 • huawei ar1200 firmware v200r005c10cp0582t • huawei ar1200 firmware v200r005c10hp0581t • huawei ar1200 firmware v200r005c20spc026t • huawei ar200 firmware v200r005c20spc026t • huawei ar3200 firmware v200r005c20spc026t • huawei cloudengine 12800 firmware v100r003c00 • huawei cloudengine 12800 firmware v100r005c00 • huawei cloudengine 12800 firmware v100r005c10 • huawei cloudengine 12800 firmware v100r006c00 • huawei cloudengine 12800 firmware v200r001c00 • huawei cloudengine 5800 firmware v100r003c00 • huawei cloudengine 5800 firmware v100r005c00 • huawei cloudengine 5800 firmware v100r005c10 • huawei cloudengine 5800 firmware v100r006c00 • huawei cloudengine 5800 firmware v200r001c00 • huawei cloudengine 6800 firmware v100r003c00 • huawei cloudengine 6800 firmware v100r005c00 • huawei cloudengine 6800 firmware v100r005c10 • huawei cloudengine 6800 firmware v100r006c00 • huawei cloudengine 6800 firmware v200r001c00 • huawei cloudengine 7800 firmware v100r003c00 • huawei cloudengine 7800 firmware v100r005c00 • huawei cloudengine 7800 firmware v100r005c10 • huawei cloudengine 7800 firmware v100r006c00 • huawei cloudengine 7800 firmware v200r001c00 • huawei cloudengine 8800 firmware v100r006c00 • huawei cloudengine 8800 firmware v200r001c00 • huawei e600 firmware v200r008c00 • huawei s12700 firmware v200r005c00 • huawei s12700 firmware v200r006c00 • huawei s12700 firmware v200r007c00 • huawei s12700 firmware v200r008c00 • huawei s1700 firmware v100r006c00 • huawei s1700 firmware v100r007c00 • huawei s1700 firmware v200r006c00 • huawei s2300 firmware v100r005c00 • huawei s2300 firmware v100r006c00 • huawei s2300 firmware v100r006c03 • huawei s2300 firmware v100r006c05 • huawei s2300 firmware v200r003c00 • huawei s2300 firmware v200r003c02 • huawei s2300 firmware v200r003c10 • huawei s2300 firmware v200r005c00 • huawei s2300 firmware v200r005c01 • huawei s2300 firmware v200r005c02 • huawei s2300 firmware v200r005c03 • huawei s2300 firmware v200r006c00 • huawei s2300 firmware v200r007c00 • huawei s2300 firmware v200r008c00 • huawei s2700 firmware v100r005c00 • huawei s2700 firmware v100r006c00 • huawei s2700 firmware v100r006c03 • huawei s2700 firmware v100r006c05 • huawei s2700 firmware v200r003c00 • huawei s2700 firmware v200r003c02 • huawei s2700 firmware v200r003c10 • huawei s2700 firmware v200r005c00 • huawei s2700 firmware v200r005c01 … and 83 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References