Integer Overflow Vulnerability in Huawei DP300 Product
CVE-2017-17147

5.5MEDIUM

Key Information:

Vendor

McAfee
Status
Dp300
Vendor
CVE Published:
9 March 2018

What is CVE-2017-17147?

The Huawei DP300 V500R002C00 version is susceptible to an integer overflow vulnerability resulting from insufficient validation during XML file parsing. This flaw allows an authenticated local attacker to create crafted XML files that can be processed by the affected device, potentially leading to denial-of-service (DoS) conditions.

Affected Version(s)

DP300 V500R002C00

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.