CVE-2017-2712

S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-417

Affected products

• S3300 Firmware (Huawei)
• S3300 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-vrp-en
• http://www.securityfocus.com/bid/95662