Out-of-Bounds Read Vulnerability in Huawei Communication Devices
CVE-2017-17200

5.9MEDIUM

Key Information:

Vendor

McAfee
Status
Dp300; Rp200; Te30; Te40; Te50; Te60
Vendor
CVE Published:
9 March 2018

What is CVE-2017-17200?

Huawei communication devices, including models such as DP300 and TE60, are susceptible to an out-of-bounds read vulnerability caused by improper handling of malformed H323 messages. This vulnerability can be exploited by a remote attacker who sends specially crafted H323 reply messages to the affected devices. If successfully exploited, this may result in the device accessing memory outside of its intended boundaries, potentially leading to service disruption.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DP300; RP200; TE30; TE40; TE50; TE60 DP300 V500R002C00

DP300; RP200; TE30; TE40; TE50; TE60 RP200 V500R002C00

DP300; RP200; TE30; TE40; TE50; TE60 V600R006C00

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.