DoS Vulnerability in Huawei DP300 and Other Products
CVE-2017-17150

5.5MEDIUM

Key Information:

Vendor

McAfee
Status
Dp300; Rp200; Te30; Te40; Te50; Te60
Vendor
CVE Published:
9 March 2018

What is CVE-2017-17150?

The Timergrp module in various Huawei devices suffers from a vulnerability stemming from inadequate parameter validation. An authenticated local attacker can exploit this issue by invoking a specific API with crafted parameters, leading to an infinite loop condition. This results in a Denial of Service, potentially crippling the affected systems. It is crucial for users to assess and apply security measures to mitigate the risk associated with this vulnerability.

Affected Version(s)

DP300; RP200; TE30; TE40; TE50; TE60 DP300 V500R002C00

DP300; RP200; TE30; TE40; TE50; TE60 RP200 V500R002C00

DP300; RP200; TE30; TE40; TE50; TE60 V600R006C00

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-17150 : DoS Vulnerability in Huawei DP300 and Other Products