CVE-2017-17304

🗓️ 09 Mar 2018 17:00:00Reported by huaweiType

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal

Reporter	Title	Published	Views	Family All 6
CNVD	Huawei DP300 CIDAM Protocol Input Checksum Vulnerability (CNVD-2017-38106)	21 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-17304	9 Mar 201817:00	–	cvelist
EUVD	EUVD-2017-8470	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Multiple Input Validation Vulnerabilities in CIDAM Protocol on Huawei Products	20 Dec 201700:00	–	huawei
NVD	CVE-2017-17304	9 Mar 201817:29	–	nvd
Prion	Input validation	9 Mar 201817:29	–	prion

NVD

Vulners

Node

huawei dp300_firmwareMatchv500r002c00

huawei dp300_firmwareMatchv500r002c00b010

huawei dp300_firmwareMatchv500r002c00b011

huawei dp300_firmwareMatchv500r002c00b012

huawei dp300_firmwareMatchv500r002c00b013

huawei dp300_firmwareMatchv500r002c00b014

huawei dp300_firmwareMatchv500r002c00b017

huawei dp300_firmwareMatchv500r002c00b018

huawei dp300_firmwareMatchv500r002c00spc100

huawei dp300_firmwareMatchv500r002c00spc200

huawei dp300_firmwareMatchv500r002c00spc300

huawei dp300_firmwareMatchv500r002c00spc400

huawei dp300_firmwareMatchv500r002c00spc500

huawei dp300_firmwareMatchv500r002c00spc600

huawei dp300_firmwareMatchv500r002c00spc800

huawei dp300_firmwareMatchv500r002c00spc900

huawei dp300_firmwareMatchv500r002c00spca00

AND

huawei dp300Match-

[
  {
    "product": "DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V500R002C00"
      },
      {
        "status": "affected",
        "version": "V500R002C00B010"
      },
      {
        "status": "affected",
        "version": "V500R002C00B011"
      },
      {
        "status": "affected",
        "version": "V500R002C00B012"
      },
      {
        "status": "affected",
        "version": "V500R002C00B013"
      },
      {
        "status": "affected",
        "version": "V500R002C00B014"
      },
      {
        "status": "affected",
        "version": "V500R002C00B017"
      },
      {
        "status": "affected",
        "version": "V500R002C00B018"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC100"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC200"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC300"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC400"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC500"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC600"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC800"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC900"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPCa00"
      },
      {
        "status": "affected",
        "version": "V600R006C00"
      },
      {
        "status": "affected",
        "version": "V600R006C00SPC200"
      },
      {
        "status": "affected",
        "version": "V600R006C00SPC300"
      },
      {
        "status": "affected",
        "version": "V600R006C00SPC400"
      },
      {
        "status": "affected",
        "version": "V600R006C00SPC500"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC300"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC500"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC600"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC700B010"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPC700"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPCb00"
      },
      {
        "status": "affected",
        "version": "V100R001C10"
      },
      {
        "status": "affected",
        "version": "V100R001C10B001"
      },
      {
        "status": "affected",
        "version": "V100R001C10B002"
      },
      {
        "status": "affected",
        "version": "V100R001C10B010"
      },
      {
        "status": "affected",
        "version": "V100R001C10B011"
      },
      {
        "status": "affected",
        "version": "V100R001C10B012"
      },
      {
        "status": "affected",
        "version": "V100R001C10B013"
      },
      {
        "status": "affected",
        "version": "V100R001C10B014"
      },
      {
        "status": "affected",
        "version": "V100R001C10B016"
      },
      {
        "status": "affected",
        "version": "V100R001C10B017"
      },
      {
        "status": "affected",
        "version": "V100R001C10B018"
      },
      {
        "status": "affected",
        "version": "V100R001C10B019"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC400"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC700"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC800B011"
      },
      {
        "status": "affected",
        "version": "V100R001C10SPC900"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPCd00"
      },
      {
        "status": "affected",
        "version": "V500R002C00SPCe00"
      },
      {
        "status": "affected",
        "version": "V600R006C00SPC100"
      },
      {
        "status": "affected",
        "version": "V200R003C20SPC900"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en

21 Nov 2024 03:17Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25.5

CVSS 36.5

EPSS0.00204

CWE-20