PT-2017-14003
CVE-2017-15331
·
Publicado
2017-11-29
·
Atualizado
2018-03-01
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Huawei AR120-S versions V200R006C10 through V200R008C30
Huawei AR1200 versions V200R006C10 through V200R008C30
Huawei AR1200-S versions V200R006C10 through V200R008C30
Huawei AR150 versions V200R006C10 through V200R008C30
Huawei AR150-S versions V200R006C10 through V200R008C30
Huawei AR160 versions V200R006C10 through V200R008C30
Huawei AR200 versions V200R006C10 through V200R008C30
Huawei AR200-S versions V200R006C10 through V200R008C30
Huawei AR2200 versions V200R006C10 through V200R008C30
Huawei AR2200-S versions V200R006C10 through V200R008C30
Huawei AR3200 versions V200R006C10 through V200R008C30
Huawei AR510 versions V200R006C10 through V200R008C30
Huawei DP300 version V500R002C00
Huawei IPS Module versions V100R001C10SPC200 through V500R001C50
Huawei MAX PRESENCE version V100R001C00
Huawei NGFW Module versions V100R001C10SPC200 through V500R002C10
Huawei NIP6300 versions V500R001C00 through V500R001C50
Huawei NIP6600 versions V500R001C00 through V500R001C50
Huawei NIP6800 version V500R001C50
Huawei NetEngine16EX versions V200R006C10 through V200R008C30
Huawei RP200 versions V500R002C00SPC200 through V600R006C00
Huawei RSE6500 version V500R002C00
Huawei SMC2.0 versions V100R003C10 through V600R006C00T
Huawei SRG1300 versions V200R006C10 through V200R008C30
Huawei SRG2300 versions V200R006C10 through V200R008C30
Huawei SRG3300 versions V200R006C10 through V200R008C30
Huawei SVN5600 versions V200R003C00 through V200R003C10
Huawei SVN5800 versions V200R003C00 through V200R003C10
Huawei SVN5800-C versions V200R003C00 through V200R003C10
Huawei Secospace USG6300 versions V100R001C10 through V500R001C50
Huawei Secospace USG6500 versions V100R001C10 through V500R001C50
Huawei TE30 versions V100R001C10 through V600R006C00
Huawei TE40 versions V500R002C00 through V600R006C00
Huawei TE50 versions V500R002C00 through V600R006C00
Huawei TE60 versions V100R001C01 through V600R006C00
Huawei TP3106 version V100R002C00
Huawei TP3206 version V100R002C00
Huawei USG9500 versions V500R001C00 through V500R001C50
Huawei USG9520 versions V300R001C01 through V300R001C20
Huawei USG9560 versions V300R001C01 through V300R001C20
Huawei USG9580 versions V300R001C01 through V300R001C20
Huawei ViewPoint 9030 versions V100R011C02 through V100R011C03
Description
There is an out-of-bounds read vulnerability in the H323 protocol of Huawei products. An unauthenticated, remote attacker may send crafted packets to the affected products. Due to insufficient verification of the packets, a successful exploit will cause a process reboot.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾