PT-2018-6475

CVE-2017-17290

·

تاريخ النشر

2018-02-15

·

تاريخ التحديث

2019-10-03

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Huawei TE60 version V600R006C00 Huawei ViewPoint 9030 versions V100R011C02, V100R011C03
Description: The issue is related to resource management errors in the LDAP clients of the affected devices. An unauthenticated, remote attacker may cause the LDAP server to not respond to the client's request, potentially leading to exhaustion of the LDAP client's connection resources due to improper management of LDAP connection resources.
Recommendations: For Huawei TE60 version V600R006C00, update the software to a version that addresses the resource management errors vulnerability. For Huawei ViewPoint 9030 versions V100R011C02 and V100R011C03, update the software to a version that addresses the resource management errors vulnerability. As a temporary workaround, consider restricting access to the LDAP server to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾