CVE-2017-8199

Name of the Vulnerable Software and Affected Versions MAX PRESENCE V100R001C00 TP3106 V100R002C00 TP3206 V100R002C00

Description The issue is related to an out-of-bounds read in the H323 protocol. An attacker can exploit this by sending crafted packets to the system after logging in as a user. The packets are not sufficiently verified, which can lead to a process reboot if the exploit is successful.

Recommendations For MAX PRESENCE V100R001C00, update the system to prevent out-of-bounds read in the H323 protocol. For TP3106 V100R002C00, restrict access to the H323 protocol until a patch is available to prevent exploitation. For TP3206 V100R002C00, consider disabling the H323 protocol temporarily as a workaround until a fix is provided.