Vulnerability CVE-2017-17282


Published: 2018-03-09

Description:
SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:A/AC:M/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.9/10
2.9/10
5.5/10
Exploit range
Attack complexity
Authentication
Adjacent network
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Huawei -> Dp300 firmware 
Huawei -> Rp200 firmware 
Huawei -> Te30 firmware 
Huawei -> Te40 firmware 
Huawei -> Te50 firmware 
Huawei -> Te60 firmware 

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en

Copyright 2024, cxsecurity.com

 

Back to Top