PT-2018-6405

CVE-2017-17133

·

Published

2018-03-05

·

Updated

2018-03-27

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Huawei VP9660 version V500R002C10
Description: The issue is related to a null pointer reference vulnerability in the license module due to insufficient verification. An authenticated local attacker could exploit this by placing a malicious license file into the system, causing memory null pointer accessing and related processing to crash, leading to a denial of service.
Recommendations: For Huawei VP9660 version V500R002C10, ensure proper verification of license files to prevent malicious files from being placed into the system. As a temporary workaround, consider restricting access to the license module to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾