PT-2018-6493
CVE-2017-17318
·
تاريخ النشر
2018-04-30
·
تاريخ التحديث
2018-06-06
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Huawei MBB (Mobile Broadband) products E5771h-937 versions before E5771h-937TCPU-V200R001B328D62SP00C1133
Huawei MBB (Mobile Broadband) products E5771h-937 versions before E5771h-937TCPU-V200R001B329D05SP00C1308
Description:
The issue allows an attacker to launch a Denial of Service (DoS) attack by sending a special http request to the device. This causes the webserver process to consume excessive memory, resulting in the device becoming unresponsive.
Recommendations:
For versions before E5771h-937TCPU-V200R001B328D62SP00C1133, update to a version after E5771h-937TCPU-V200R001B328D62SP00C1133 to resolve the issue.
For versions before E5771h-937TCPU-V200R001B329D05SP00C1308, update to a version after E5771h-937TCPU-V200R001B329D05SP00C1308 to resolve the issue.
As a temporary workaround, consider restricting access to the webserver process to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾