Improper Resource Management in Huawei AR Series Devices

CVE-2018-7920

Summary

Huawei's AR1200, AR160, AR200, AR2200, and AR3200 devices are susceptible to a vulnerability stemming from an improper implementation of the Access Control List (ACL) mechanism. This security flaw can be exploited by remote attackers who send specially crafted TCP messages to the devices' management interface. The exploitation leads to a depletion of socket resources, which can cause a Denial of Service (DoS) situation, rendering the management interface unresponsive. Protecting these devices from such attacks is crucial to maintaining network integrity and uptime.

References