Vulnerability CVE-2017-17308


Published: 2018-04-11

Description:
SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote attacker may send specially crafted packets to the affected products. Due to insufficient validation of packets, successful exploit may cause some services abnormal.

Type:

CWE-20

(Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Huawei -> Dp300 firmware 
Huawei -> Rp200 firmware 
Huawei -> Te30 firmware 
Huawei -> Te40 firmware 
Huawei -> Te50 firmware 
Huawei -> Te60 firmware 

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-sccpx-en

Copyright 2024, cxsecurity.com

 

Back to Top