CVE-2017-17132

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2018-03-05

Last modified

2024-09-17

Weaknesses

CWE-134

Affected products

• Vp9660 Firmware (Huawei)
• Vp9660 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en