CVE-2017-8199

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-125

Affected products

• Max Presence Firmware (Huawei)
• Tp3106 Firmware (Huawei)
• Tp3206 Firmware (Huawei)
• Max Presencetp3106tp3206 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en
• http://www.securityfocus.com/bid/101951