Vulnerability CVE-2017-15353


Published: 2018-02-15

Description:
Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C03, Viewpoint 8660, V100R008C03 have an out-of-bounds read vulnerability. An attacker has to control the peer device and send specially crafted messages to the affected products. Due to insufficient input validation, successful exploit may cause some service abnormal.

Type:

CWE-125

(Out-of-bounds Read)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Huawei -> Dp300 firmware 
Huawei -> Rp200 firmware 
Huawei -> Rse6500 firmware 
Huawei -> Te30 firmware 
Huawei -> Te40 firmware 
Huawei -> Te50 firmware 
Huawei -> Te60 firmware 
Huawei -> Tx50 firmware 
Huawei -> Viewpoint 8660 firmware 
Huawei -> Viewpoint 9030 firmware 
Huawei -> Vp9660 firmware 

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-h323-en

Copyright 2024, cxsecurity.com

 

Back to Top