CVE-2017-17286 Information

Description

Huawei AR120-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR1200 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR1200-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR150 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR150-S V200R005C32 V200R007C00 V200R008C20 V200R008C30 AR160 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR200 V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R008C20 V200R008C30 AR200-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR2200 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR2200-S V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR3200 V200R005C32 V200R006C10 V200R006C11 V200R007C00 V200R007C01 V200R007C02 V200R008C00 V200R008C10 V200R008C20 V200R008C30 AR3600 V200R006C10 V200R007C00 V200R007C01 V200R008C20 AR510 V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 NetEngine16EX V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 SRG1300 V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30 SRG2300 V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30 SRG3300 V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 have an out-of-bound write vulnerability. Due to insufficient input validation a remote unauthenticated attacker may craft encryption key to the affected products. Successful exploit may cause buffer overflow services abnormal.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Reference

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

LOW

Base Severity

5.3