Out-of-Bounds Read Vulnerability in Huawei SFTP Module
CVE-2017-17281

4.3MEDIUM

Key Information:

Vendor
McAfee
Status
Dp300; Rp200; Te30; Te40; Te50; Te60
Vendor
CVE Published:
9 March 2018

Summary

The SFTP module in several Huawei products, including the DP300, RP200, and TE series, contains an out-of-bounds read vulnerability. This allows remote authenticated attackers to exploit the issue by sending specially crafted messages, potentially leading to information leakage from the devices. Users of the affected Huawei models should take necessary precautions to mitigate the risk associated with this vulnerability.

Affected Version(s)

DP300; RP200; TE30; TE40; TE50; TE60 DP300 V500R002C00

DP300; RP200; TE30; TE40; TE50; TE60 RP200 V600R006C00

DP300; RP200; TE30; TE40; TE50; TE60 TE30 V100R001C10

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.