Vulnerability CVE-2017-17302


Published: 2018-02-15

Description:
Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. An authenticated, local attacker may craft and load some specific Certificate Revocation List(CRL) configuration files to the devices repeatedly. Due to not release allocated memory properly, successful exploit may result in memory leak and services abnormal.

Type:

CWE-772

CVSS2 => (AV:L/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.1/10
2.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Huawei -> Dp300 firmware 
Huawei -> Rp200 firmware 
Huawei -> Te30 firmware 
Huawei -> Te40 firmware 
Huawei -> Te50 firmware 
Huawei -> Te60 firmware 

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-memory-en

Copyright 2024, cxsecurity.com

 

Back to Top