CVE-2017-15353
Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C03, Viewpoint 8660, V100R008C03 have an out-of-bounds read vulnerability. An attacker has to control the peer device and send specially crafted messages to the affected products. Due to insufficient input validation, successful exploit may cause some service abnormal.
- Score
- CVSS 3.0 3.7 Low
- Status
- Modified - psirt@huawei.com
- Published
- 2018-02-15
- Last modified
- 2024-08-05
- Weaknesses
- CWE-125
Affected products
- Dp300 Firmware (Huawei)
- Rp200 Firmware (Huawei)
- Rse6500 Firmware (Huawei)
- Te30 Firmware (Huawei)
- Te40 Firmware (Huawei)
- Te50 Firmware (Huawei)
- Te60 Firmware (Huawei)
- Tx50 Firmware (Huawei)
- Viewpoint 8660 Firmware (Huawei)
- Viewpoint 9030 Firmware (Huawei)
- Vp9660 Firmware (Huawei)
- Dp300rp200rse6500te30te40te50te60tx50vp9660viewpoint 8660viewpoint 9030viewpoint 8660 (Huawei Technologies Co. Ltd.)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-h323-en
