Lucene search

HuaweiCVE-2017-17132

HistoryMar 05, 2018 - 7:29 p.m.

CVE-2017-17132

2018-03-0519:29:00

CWE-134

huawei

web.nvd.nist.gov

cve-2017-17132

huawei

vp9660

v500r002c10

format string

vulnerability

nvd

denial of service

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

Percentile

0.4%

JSON

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service.

Affected configurations

Nvd

Vulners

Node

huaweivp9660_firmwareMatchv500r002c10

AND

huaweivp9660Match-

VendorProductVersionCPE
huaweivp9660_firmwarev500r002c10cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*
huaweivp9660-cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	vp9660_firmware	v500r002c10	cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:::::::*
huawei	vp9660	-	cpe:2.3:h:huawei:vp9660:-:::::::*

CNA Affected

[
  {
    "product": "VP9660",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "V500R002C10"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-license-en

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2017-17132