Vulnerability CVE-2017-17281
Published: 2018-03-09

Description:
SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. A remote, authenticated attacker could exploit this vulnerability by sending specially crafted messages to a target device. Successful exploit may cause some information leak.

Type:

CWE-125

 (Out-of-bounds Read)

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4/10
2.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Huawei -> Dp300 firmware 
Huawei -> Rp200 firmware 
Huawei -> Te30 firmware 
Huawei -> Te40 firmware 
Huawei -> Te50 firmware 
Huawei -> Te60 firmware 

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en
Copyright 2024, cxsecurity.com

 

Back to Top