DoS Vulnerability in Huawei DP300 and Other Products

CVE-2017-17150

Summary

The Timergrp module in various Huawei devices suffers from a vulnerability stemming from inadequate parameter validation. An authenticated local attacker can exploit this issue by invoking a specific API with crafted parameters, leading to an infinite loop condition. This results in a Denial of Service, potentially crippling the affected systems. It is crucial for users to assess and apply security measures to mitigate the risk associated with this vulnerability.

References