CVE-2017-17133

Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification. An authenticated local attacker could place a malicious license file into system which cause memory null pointer accessing and related processing crash. The attacker can exploit this vulnerability to cause a denial of service.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2018-03-05

Last modified

2024-09-16

Weaknesses

CWE-476

Affected products

• Vp9660 Firmware (Huawei)
• Vp9660 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en