Null Pointer Reference Vulnerability in Huawei VP9660 License Module

CVE-2017-17133

Summary

The Huawei VP9660 V500R002C10 contains a null pointer reference vulnerability within its license module, stemming from inadequate verification processes. This issue can be exploited by an authenticated local attacker who places a malicious license file in the system. The exploitation leads to attempts to access memory via a null pointer, resulting in crashes during processing. Such vulnerabilities can be used to execute denial-of-service attacks, compromising system stability and performance.

References