Out-of-Bounds Read Vulnerability in Huawei Networking Devices

CVE-2017-17316

What is CVE-2017-17316?

Huawei networking devices, including models like DP300 and TE series, have been identified to possess an out-of-bounds read vulnerability. This flaw arises from inadequate input validation in the Signalling Connection Control Part (SCCP) messages. An unauthenticated remote attacker can exploit this vulnerability by controlling a peer device and crafting malicious SCCP messages, potentially leading to abnormal service disruptions. It is crucial for users to assess their exposure and apply necessary patches to mitigate risks.

References