PT-2018-6493

CVE-2017-17318

·

Publicado

2018-04-30

·

Atualizado

2018-06-06

Descrição por

CVSS 3.1
6.5
Média
MétricasAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Huawei MBB (Mobile Broadband) products E5771h-937 versions before E5771h-937TCPU-V200R001B328D62SP00C1133 Huawei MBB (Mobile Broadband) products E5771h-937 versions before E5771h-937TCPU-V200R001B329D05SP00C1308
Description: The issue allows an attacker to launch a Denial of Service (DoS) attack by sending a special http request to the device. This causes the webserver process to consume excessive memory, resulting in the device becoming unresponsive.
Recommendations: For versions before E5771h-937TCPU-V200R001B328D62SP00C1133, update to a version after E5771h-937TCPU-V200R001B328D62SP00C1133 to resolve the issue. For versions before E5771h-937TCPU-V200R001B329D05SP00C1308, update to a version after E5771h-937TCPU-V200R001B329D05SP00C1308 to resolve the issue. As a temporary workaround, consider restricting access to the webserver process to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾