Buffer Overflow Vulnerability in Huawei DP300 Devices

CVE-2017-17146

What is CVE-2017-17146?

Huawei DP300 devices, specifically the V500R002C00 version, exhibit a buffer overflow vulnerability caused by inadequate input validation. An authenticated local attacker can exploit this weakness by creating specially crafted XML files, which when processed, may lead to denial-of-service (DoS) conditions or allow remote execution of arbitrary code on the affected device. This makes it critical for users to apply necessary updates and maintain device security.

References