Null Pointer Dereference in Huawei Networking Equipment
CVE-2017-17251

5.3MEDIUM

Key Information:

Vendor
McAfee
Status
Ar120-s, Ar1200, Ar1200-s, Ar150, Ar150-s, Ar160, Ar200, Ar200-s, Ar2200, Ar2200-s, Ar3200, Ar3600, Ar510, Dp300, Ips Module, Ngfw Module, Nip6300, Nip6600, Nip6800, Netengine16ex, Rse6500, Srg1300, Srg2300, Srg3300, Svn5600, Svn5800, Svn5800-c, Semg9811, Secospace Usg6300, Secospace Usg6500, Secospace Usg6600, Te30, Te40, Te50, Te60, Tp3106, Tp3206, Usg6000v, Usg9500, Usg9520, Usg9560, Usg9580, Vp9660, VieWPoint 8660, VieWPoint 9030
Vendor
CVE Published:
24 April 2018

Summary

The affected Huawei networking products exhibit a null pointer dereference vulnerability in the H323 protocol. This vulnerability allows an unauthenticated, remote attacker to send specially crafted malformed packets to the affected devices. Due to a lack of sufficient packet validation, this can lead to a process crash, affecting the availability and functionality of the device.

Affected Version(s)

AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, AR510, DP300, IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, NetEngine16EX, RSE6500, SRG1300, SRG2300, SRG3300, SVN5600, SVN5800, SVN5800-C, SeMG9811, Secospace USG6300, Secospace USG6500, Secospace USG6600, TE30, TE40, TE50, TE60, TP3106, TP3206, USG6000V, USG9500, USG9520, USG9560, USG9580, VP9660, ViewPoint 8660, ViewPoint 9030 AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006 ...[truncated*]

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.