Out-of-Bounds Read Vulnerability in Huawei Communication Devices

CVE-2017-17200

What is CVE-2017-17200?

Huawei communication devices, including models such as DP300 and TE60, are susceptible to an out-of-bounds read vulnerability caused by improper handling of malformed H323 messages. This vulnerability can be exploited by a remote attacker who sends specially crafted H323 reply messages to the affected devices. If successfully exploited, this may result in the device accessing memory outside of its intended boundaries, potentially leading to service disruption.

References