CVE-2017-17150

🗓️ 09 Mar 2018 17:00:00Reported by huaweiType

CVE-2017-17150 Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the parameter. An authenticated local attacker may call a special API with special parameter, which cause an infinite loop. Successful exploit of this vulnerability can allow an attacker to launch DOS attack

Reporter	Title	Published	Views	Family All 7
CNVD	Timergrp module denial of service vulnerability in multiple Huawei products	21 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-17150	9 Mar 201817:00	–	cvelist
EUVD	EUVD-2017-8316	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - DoS Vulnerability in Timergrp Module of Some Huawei Products	20 Dec 201700:00	–	huawei
NVD	CVE-2017-17150	9 Mar 201817:29	–	nvd
OSV	CVE-2017-17150	9 Mar 201817:29	–	osv
Prion	Input validation	9 Mar 201817:29	–	prion

NVD

Vulners

Node

huawei dp300_firmwareMatchv500r002c00

AND

huawei dp300Match-

Node

huawei rp200_firmwareMatchv500r002c00

huawei rp200_firmwareMatchv600r006c00

AND

huawei rp200Match-

Node

huawei te30_firmwareMatchv100r001c10

huawei te30_firmwareMatchv500r002c00

huawei te30_firmwareMatchv600r006c00

AND

huawei te30Match-

Node

huawei te40_firmwareMatchv500r002c00

huawei te40_firmwareMatchv600r006c00

AND

huawei te40Match-

Node

huawei te50_firmwareMatchv500r002c00

huawei te50_firmwareMatchv600r006c00

AND

huawei te50Match-

Node

huawei te60_firmwareMatchv100r001c10

huawei te60_firmwareMatchv500r002c00

huawei te60_firmwareMatchv600r006c00

AND

huawei te60Match-

[
  {
    "product": "DP300; RP200; TE30; TE40; TE50; TE60",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "DP300 V500R002C00"
      },
      {
        "status": "affected",
        "version": "RP200 V500R002C00"
      },
      {
        "status": "affected",
        "version": "V600R006C00"
      },
      {
        "status": "affected",
        "version": "TE30 V100R001C10"
      },
      {
        "status": "affected",
        "version": "V500R002C00"
      },
      {
        "status": "affected",
        "version": "TE40 V500R002C00"
      },
      {
        "status": "affected",
        "version": "TE50 V500R002C00"
      },
      {
        "status": "affected",
        "version": "TE60 V100R001C10"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-vpp-en

21 Nov 2024 03:17Current

5.3Medium risk

Vulners AI Score5.3

CVSS 22.1

CVSS 35.5

EPSS0.00021

CWE-835