CVE-2017-17202 Information
Description
Huawei AR120-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR1200 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR1200-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR150 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR150-S V200R005C32 V200R007C00 V200R008C20 V200R008C30 AR160 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR200 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R008C20 V200R008C30 AR200-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR2200 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR2200-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR3200 V200R005C32 V200R006C10 V200R006C11 V200R007C00 V200R007C01 V200R007C02 V200R008C00 V200R008C10 V200R008C20 V200R008C30 AR3600 V200R006C10 V200R007C00 V200R007C01 V200R008C20 AR510 V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 NetEngine16EX V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 SRG1300 V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30 SRG2300 V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30 SRG3300 V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a service to be unavailable.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reference
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-sip-en
Attack Complexity
LOW
Privileges Required
NONE
User Interaction Required
NONE
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
NONE
Availability Impact
NONE
Base Score
HIGH
Base Severity
7.5
Share on: