Out-of-bounds Write Vulnerability in Huawei Media Gateway Products
CVE-2017-17217

5.9MEDIUM

Key Information:

Vendor
McAfee
Status
Dp300; Rp200; Te30; Te40; Te50; Te60
Vendor
CVE Published:
9 March 2018

Summary

An out-of-bounds write vulnerability exists in the Media Gateway Control Protocol (MGCP) implementations of various Huawei products. Unauthenticated remote attackers may exploit this flaw by sending specially crafted packets that are not properly validated. This can lead to disruptions in the availability of the service provided by the affected products, posing significant risks to operational stability.

Affected Version(s)

DP300; RP200; TE30; TE40; TE50; TE60 DP300 V500R002C00

DP300; RP200; TE30; TE40; TE50; TE60 RP200 V500R002C00SPC200

DP300; RP200; TE30; TE40; TE50; TE60 V600R006C00

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.